workspai 0.72.0 → 0.73.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/README.md +5 -2
  2. package/dist/analyze-WC2TY5AT.js +1 -0
  3. package/dist/autopilot-release-LJDRECFW.js +1 -0
  4. package/dist/{chunk-7LKCWDX6.js → chunk-2BCECNIW.js} +1 -1
  5. package/dist/{chunk-LDNX2R6V.js → chunk-3GO7BJ5J.js} +1 -1
  6. package/dist/{chunk-QVUVJU56.js → chunk-3SNP6M4M.js} +1 -1
  7. package/dist/chunk-4HQU2GQM.js +1 -0
  8. package/dist/{chunk-T6KHOIEY.js → chunk-4JAURS76.js} +1 -1
  9. package/dist/chunk-7O7P4MRD.js +1 -0
  10. package/dist/{chunk-5TKRCE6F.js → chunk-AQNU5RXV.js} +1 -1
  11. package/dist/{chunk-TDQ2PRHV.js → chunk-D3N2WFDV.js} +1 -1
  12. package/dist/{chunk-SG3QRCMM.js → chunk-DNKELRK6.js} +1 -1
  13. package/dist/{chunk-T6LCDLJ7.js → chunk-EDDGQ6LM.js} +1 -1
  14. package/dist/{chunk-LLEKVSMX.js → chunk-F6CTGVJA.js} +1 -1
  15. package/dist/{chunk-D5RUGSBC.js → chunk-FRH7AIGY.js} +2 -2
  16. package/dist/{chunk-KVPTZMEV.js → chunk-HAZGSAKP.js} +1 -1
  17. package/dist/{chunk-COBU44T5.js → chunk-IPZT6WKM.js} +1 -1
  18. package/dist/{chunk-TQQEZQLC.js → chunk-J44PN2FX.js} +1 -1
  19. package/dist/{chunk-EDPUQXP6.js → chunk-K3O3HENC.js} +1 -1
  20. package/dist/{chunk-SS7X2YF5.js → chunk-LDJAUIAG.js} +1 -1
  21. package/dist/{chunk-SATPH22S.js → chunk-LGC4CRUF.js} +1 -1
  22. package/dist/{chunk-IX5Z6EK6.js → chunk-ND5YAC4T.js} +1 -1
  23. package/dist/{chunk-WPZUKU2B.js → chunk-NNQE4DS2.js} +1 -1
  24. package/dist/chunk-NSMRQOWP.js +157 -0
  25. package/dist/{chunk-WMC2H7MJ.js → chunk-OIGI7MP6.js} +1 -1
  26. package/dist/{chunk-S66NO5BX.js → chunk-R5OJD5K2.js} +1 -1
  27. package/dist/{chunk-ONV6WW7A.js → chunk-SO4CGS35.js} +1 -1
  28. package/dist/{chunk-5OLNT6YD.js → chunk-T5NBSCVX.js} +65 -65
  29. package/dist/{chunk-2RF75G5T.js → chunk-TIZCESKY.js} +1 -1
  30. package/dist/{chunk-62YBFWHY.js → chunk-TSYDTKXO.js} +1 -1
  31. package/dist/{chunk-N2PAAQKI.js → chunk-TZK2R6RD.js} +1 -1
  32. package/dist/{chunk-JQINCVK5.js → chunk-UCNIXOTL.js} +1 -1
  33. package/dist/{chunk-UHAPXPGW.js → chunk-VBMWFT7Q.js} +1 -1
  34. package/dist/chunk-YYELANJO.js +7 -0
  35. package/dist/{chunk-QYXX6G5O.js → chunk-ZZWGD3X3.js} +1 -1
  36. package/dist/{create-7CWWGDXQ.js → create-XYKXS3JB.js} +1 -1
  37. package/dist/{doctor-WYBSI3GC.js → doctor-LQ7FT6AZ.js} +1 -1
  38. package/dist/{goal-lifecycle-PSPYQ4TR.js → goal-lifecycle-BIX2JVNO.js} +1 -1
  39. package/dist/{goal-pack-G7SAYDIC.js → goal-pack-SUWH6K7U.js} +1 -1
  40. package/dist/index.js +22 -22
  41. package/dist/{pipeline-NDV7DBB7.js → pipeline-NSPPWD7U.js} +1 -1
  42. package/dist/{project-agent-entry-HEBGPLMX.js → project-agent-entry-Y3NEHZED.js} +1 -1
  43. package/dist/{project-intelligence-lens-QTQEZXUY.js → project-intelligence-lens-6Q6XSUDJ.js} +1 -1
  44. package/dist/{project-test-coverage-4BGDDBBL.js → project-test-coverage-5PXAHBYQ.js} +1 -1
  45. package/dist/{proof-carrying-change-SHO2E3DX.js → proof-carrying-change-456TYEDW.js} +1 -1
  46. package/dist/{verified-goal-BSREU6R7.js → verified-goal-GRH5UOJR.js} +1 -1
  47. package/dist/{workspace-E3MM3AIE.js → workspace-ROUEA3RT.js} +1 -1
  48. package/dist/{workspace-agent-sync-NBIOSXCG.js → workspace-agent-sync-6UYG33EQ.js} +1 -1
  49. package/dist/{workspace-context-ZDXF6S7S.js → workspace-context-H7ZXR6VI.js} +1 -1
  50. package/dist/{workspace-contract-E7GVWM7W.js → workspace-contract-2V2BI6A3.js} +1 -1
  51. package/dist/{workspace-explain-YB66UFAS.js → workspace-explain-IBMTRUSF.js} +1 -1
  52. package/dist/{workspace-foundation-LRLYPR36.js → workspace-foundation-H5B3TTZD.js} +1 -1
  53. package/dist/{workspace-graph-stream-SJUCBPS4.js → workspace-graph-stream-YDEET5LK.js} +1 -1
  54. package/dist/workspace-graph-token-efficiency-XM3LYFUC.js +1 -0
  55. package/dist/{workspace-intelligence-3IAAM3H3.js → workspace-intelligence-DXKQXTTM.js} +1 -1
  56. package/dist/{workspace-intelligence-benchmark-UCGDKMDF.js → workspace-intelligence-benchmark-L46EGZZM.js} +1 -1
  57. package/dist/{workspace-intelligence-runner-FPPKTSNK.js → workspace-intelligence-runner-SCB44IXU.js} +1 -1
  58. package/dist/{workspace-knowledge-graph-WNQMNAVL.js → workspace-knowledge-graph-BNEVFEOW.js} +1 -1
  59. package/dist/{workspace-knowledge-graph-query-3GPXGWYN.js → workspace-knowledge-graph-query-GOC365ZR.js} +1 -1
  60. package/dist/workspace-knowledge-graph-snapshot-2NMV7LEJ.js +1 -0
  61. package/dist/{workspace-mcp-serve-KSZ2O66S.js → workspace-mcp-serve-JLZTTEVG.js} +1 -1
  62. package/dist/{workspace-model-5FA2636K.js → workspace-model-XSNLDUI2.js} +1 -1
  63. package/dist/{workspace-onboarding-RJMTHN7Z.js → workspace-onboarding-IRBVZTT4.js} +1 -1
  64. package/dist/{workspace-registry-summary-WKENOFEA.js → workspace-registry-summary-CBZDSG6I.js} +1 -1
  65. package/dist/{workspace-repair-engine-4JTNNDZL.js → workspace-repair-engine-TDUNQSFJ.js} +1 -1
  66. package/dist/workspace-run-I2W5PIPK.js +1 -0
  67. package/dist/{workspace-verify-37QL2JYE.js → workspace-verify-QTRY7WW3.js} +1 -1
  68. package/dist/{workspace-watch-P5X6TAFK.js → workspace-watch-PDQKYBYQ.js} +1 -1
  69. package/docs/SECURITY.md +16 -59
  70. package/docs/ci-workflows.md +43 -11
  71. package/docs/doctor-command.md +7 -0
  72. package/package.json +2 -5
  73. package/scripts/enterprise-package-smoke.mjs +14 -2
  74. package/dist/analyze-5ENZTHOT.js +0 -1
  75. package/dist/autopilot-release-PNSWAVZG.js +0 -1
  76. package/dist/chunk-5PFFR5S7.js +0 -157
  77. package/dist/chunk-6WOFOOM7.js +0 -7
  78. package/dist/chunk-BVWDG66W.js +0 -1
  79. package/dist/chunk-X5ZNFXFI.js +0 -1
  80. package/dist/workspace-graph-token-efficiency-BTIS6JXL.js +0 -1
  81. package/dist/workspace-knowledge-graph-snapshot-MTFTCVFF.js +0 -1
  82. package/dist/workspace-run-HFOY2UYT.js +0 -1
  83. package/scripts/check-cli-resolution.cjs +0 -72
package/dist/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- import {a as a$o}from'./chunk-ICGWHIMK.js';import {a as a$t}from'./chunk-WMC2H7MJ.js';import {d as d$3,c as c$3,p as p$3,b as b$k,a as a$J}from'./chunk-3WHE7V4M.js';import {h as h$3,b as b$g,a as a$A}from'./chunk-LDBULT2T.js';import {b,c,d,j as j$1,h as h$1,i,r,l,n as n$3,p as p$5,o as o$2,m as m$3,q as q$3,a as a$L,k as k$6}from'./chunk-T6LCDLJ7.js';import {a as a$k}from'./chunk-SG3QRCMM.js';import {a as a$u}from'./chunk-62YBFWHY.js';import {c as c$9,b as b$f,a as a$s}from'./chunk-UNXG3ZFV.js';import {k,m,n as n$1,b as b$o,c as c$i,o as o$6,d as d$9,e as e$e,f as f$7,p as p$7,g as g$b,q as q$4,j as j$9,i as i$5,l as l$7}from'./chunk-ONV6WW7A.js';import {d as d$4,a as a$m,g as g$6,e as e$7,j as j$6}from'./chunk-V4LCPLV6.js';import {c as c$1,b as b$6,a as a$K}from'./chunk-LPCWROQ3.js';import {b as b$b,a as a$n}from'./chunk-O5XQP5E7.js';import {b as b$4,a as a$8}from'./chunk-N2PAAQKI.js';import {b as b$e,a as a$q,c as c$8}from'./chunk-COBU44T5.js';import {j as j$4,a as a$e,k as k$3}from'./chunk-5PFFR5S7.js';import {b as b$9,g as g$4,c as c$f,a as a$I}from'./chunk-5TKRCE6F.js';import {b as b$8,a as a$b}from'./chunk-D5LLTUTY.js';import {c as c$5,d as d$6,e as e$4,b as b$d,g as g$5}from'./chunk-D5RUGSBC.js';import {g as g$8,e as e$b,c as c$c,b as b$h,a as a$E}from'./chunk-UHAPXPGW.js';import {a as a$l,c as c$d,b as b$i}from'./chunk-5OLNT6YD.js';import {a,b as b$1}from'./chunk-B6FJ6RG6.js';import {a as a$r}from'./chunk-XVTN5DDV.js';import {a as a$v}from'./chunk-X5ZNFXFI.js';import {a as a$p}from'./chunk-IVYPC36J.js';import {e as e$2,d as d$5}from'./chunk-QYEQVNBF.js';import {a as a$y}from'./chunk-JQINCVK5.js';import {a as a$D}from'./chunk-COICGD62.js';import {c as c$a,a as a$z}from'./chunk-S66NO5BX.js';import {a as a$H,b as b$j}from'./chunk-N4B2M44I.js';import {a as a$G}from'./chunk-NS53IPAC.js';import {f as f$3}from'./chunk-QVUVJU56.js';import {b as b$7,d as d$7,c as c$6,a as a$7,f as f$6,e as e$c}from'./chunk-NSH7TTSV.js';import {b as b$5,a as a$3,d as d$2}from'./chunk-EBQS5T7Q.js';import {a as a$d}from'./chunk-2RF75G5T.js';import {a as a$a}from'./chunk-A5FBGRJA.js';import {a as a$x}from'./chunk-HCFOVANQ.js';import {k as k$4,e as e$9,c as c$b,a as a$M,b as b$l}from'./chunk-BVWDG66W.js';import {j,a as a$1,n as n$5,m as m$5,o as o$4,s as s$1,l as l$5,r as r$4,p as p$6,u as u$2,t as t$3}from'./chunk-46QH3ZVI.js';import {b as b$a,a as a$g}from'./chunk-IX5Z6EK6.js';import {a as a$i}from'./chunk-NMXGSVMD.js';import {c as c$4,g as g$2,b as b$c,a as a$j,e as e$8,l as l$4}from'./chunk-WPZUKU2B.js';import {b as b$2,d as d$1,a as a$4,e as e$3,z,y,j as j$2,k as k$2,m as m$1,n as n$2,o as o$1,l as l$1,t as t$2,p as p$4,B,r as r$3,h as h$5,s as s$2,A,C,u as u$1,f as f$5,x,w as w$2,v as v$2}from'./chunk-SATPH22S.js';export{s as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-SATPH22S.js';import {m as m$2,j as j$5,l as l$2}from'./chunk-6WOFOOM7.js';import {a as a$h}from'./chunk-GR6442P7.js';import {g as g$1,a as a$c,e as e$5}from'./chunk-FE5R6EUV.js';import {b as b$n}from'./chunk-K33JJVQZ.js';import {a as a$5}from'./chunk-AFIFZTOY.js';import {v,t,p,q,s,r as r$2,o as o$3,n as n$4,m as m$4,k as k$5,j as j$7,i as i$2,h as h$4,l as l$3,g as g$7,e as e$a,f as f$4,c as c$e,a as a$F,w as w$1}from'./chunk-ODK4LCEL.js';import {a as a$w}from'./chunk-FB7SCXAZ.js';import {h,e,g,c as c$2,a as a$9,f as f$2}from'./chunk-PKKSRXUS.js';import {a as a$f}from'./chunk-TQEMLBAG.js';import {a as a$C}from'./chunk-64XWHDZ3.js';import {c as c$7}from'./chunk-25AWHAB5.js';import {a as a$B}from'./chunk-W37NOQVG.js';import {f,e as e$1,a as a$6,d as d$8,i as i$3,g as g$9}from'./chunk-FY4X2VOE.js';import {o,b as b$3,p as p$2,q as q$2,r as r$1,m as m$6,i as i$4,j as j$8,e as e$d,g as g$a,c as c$g}from'./chunk-RGNCL5OB.js';import {c as c$h}from'./chunk-2FIX2MDC.js';import {n,f as f$1,u,p as p$1,w,q as q$1,k as k$1,t as t$1,v as v$1,j as j$3,g as g$3,h as h$2,i as i$1,e as e$6,a as a$N,b as b$m,l as l$6,o as o$5}from'./chunk-VQZ5PI5J.js';import {Command,Option}from'commander';import a$2 from'chalk';import P from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import $m from'vm';import*as M from'fs-extra';import M__default from'fs-extra';import I,{existsSync,promises,createWriteStream}from'fs';import Kn,{tmpdir,homedir}from'os';import {execa}from'execa';import At,{randomUUID,createVerify,createHash,createHmac}from'crypto';import mp from'http';import gp from'https';function od(){return j$8()}function nd(t,e){return t==="py"?["-3",...e]:e}function sd(t){return typeof t=="object"&&t!==null}async function ad(t,e,r,o=c$h()){try{let n=await execa(t,e,{cwd:r,timeout:o,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function id(t,e){let r=["-m","rapidkit",...t],o=od();for(let n of o){let s=await ad(n,nd(n,r),e?.cwd,e?.timeoutMs);if(!s.ok)continue;let i=(s.stdout??"").trim();try{let c=JSON.parse(i);return sd(c)?{ok:true,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr,data:c}:{ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}catch{return {ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}}return {ok:false}}async function xc(t,e){let r=await id(["project","detect","--path",t,"--json"],e);return !r.ok||!r.data||r.data.schema_version!==1?{ok:false,command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}:r}var Rc=new Set(["create"]),Ln=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),cd=new Set(["pip","poetry","venv","pipx","python"]);function Ac(t){return typeof t=="string"&&cd.has(t)}function Fn(t,e){return !t||Rc.has(t)?false:a$6.has(t)?true:e?.has(t)??false}function Gn(t,e=null){let r=t[0];return !r||r.startsWith("-")||Rc.has(r)||r==="init"?false:Fn(r,e)?true:t.filter(n=>!n.startsWith("-")&&!Ln.has(n)).length<=1?false:t.length>1}var Zt=P.join(Kn.homedir(),".workspairc.json"),ld=P.join(Kn.homedir(),".rapidkitrc.json"),pd=P.join(Kn.homedir(),".rapidkit","config.json");function Jn(t){try{if(!I.existsSync(t))return {};let e=I.readFileSync(t,"utf-8"),r=JSON.parse(e);return !r||typeof r!="object"||Array.isArray(r)?{}:r}catch{return {}}}function _c(t){if(process.platform!=="win32")try{I.chmodSync(t,384);}catch{}}function er(){let t=Jn(Zt),e=Jn(ld),r=Jn(pd);return I.existsSync(Zt)&&_c(Zt),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??r.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??r.aiEnabled,telemetry:t.telemetry??e.telemetry??r.telemetry}}function Co(t){let r={...er(),...t};I.writeFileSync(Zt,JSON.stringify(r,null,2),{encoding:"utf-8",mode:384}),_c(Zt);}function Nr(){return process.env.OPENAI_API_KEY||er().openaiApiKey||null}function Hn(){return er().aiEnabled!==false}function Un(){return Zt}function Ic(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async r=>{let o=r.key;o?o.startsWith("sk-")||(console.log(a$2.red(`
2
+ import {a as a$o}from'./chunk-ICGWHIMK.js';import {a as a$t}from'./chunk-OIGI7MP6.js';import {d as d$3,c as c$3,p as p$3,b as b$k,a as a$J}from'./chunk-3WHE7V4M.js';import {h as h$3,b as b$g,a as a$A}from'./chunk-LDBULT2T.js';import {b,c,d,j as j$1,h as h$1,i,r,l,n as n$3,p as p$5,o as o$2,m as m$3,q as q$3,a as a$L,k as k$6}from'./chunk-EDDGQ6LM.js';import {a as a$k}from'./chunk-DNKELRK6.js';import {a as a$u}from'./chunk-TSYDTKXO.js';import {c as c$9,b as b$f,a as a$s}from'./chunk-UNXG3ZFV.js';import {k,m,n as n$1,b as b$o,c as c$i,o as o$6,d as d$9,e as e$e,f as f$7,p as p$7,g as g$b,q as q$4,j as j$9,i as i$5,l as l$7}from'./chunk-SO4CGS35.js';import {d as d$4,a as a$m,g as g$6,e as e$7,j as j$6}from'./chunk-V4LCPLV6.js';import {c as c$1,b as b$6,a as a$K}from'./chunk-LPCWROQ3.js';import {b as b$b,a as a$n}from'./chunk-O5XQP5E7.js';import {b as b$4,a as a$8}from'./chunk-TZK2R6RD.js';import {b as b$e,a as a$q,c as c$8}from'./chunk-IPZT6WKM.js';import {j as j$4,a as a$e,k as k$3}from'./chunk-NSMRQOWP.js';import {b as b$9,g as g$4,c as c$f,a as a$I}from'./chunk-AQNU5RXV.js';import {b as b$8,a as a$b}from'./chunk-D5LLTUTY.js';import {c as c$5,d as d$6,e as e$4,b as b$d,g as g$5}from'./chunk-FRH7AIGY.js';import {g as g$8,e as e$b,c as c$c,b as b$h,a as a$E}from'./chunk-VBMWFT7Q.js';import {a as a$l,c as c$d,b as b$i}from'./chunk-T5NBSCVX.js';import {a,b as b$1}from'./chunk-B6FJ6RG6.js';import {a as a$r}from'./chunk-XVTN5DDV.js';import {a as a$v}from'./chunk-7O7P4MRD.js';import {a as a$p}from'./chunk-IVYPC36J.js';import {e as e$2,d as d$5}from'./chunk-QYEQVNBF.js';import {a as a$y}from'./chunk-UCNIXOTL.js';import {a as a$D}from'./chunk-COICGD62.js';import {c as c$a,a as a$z}from'./chunk-R5OJD5K2.js';import {a as a$H,b as b$j}from'./chunk-N4B2M44I.js';import {a as a$G}from'./chunk-NS53IPAC.js';import {f as f$3}from'./chunk-3SNP6M4M.js';import {b as b$7,d as d$7,c as c$6,a as a$7,f as f$6,e as e$c}from'./chunk-NSH7TTSV.js';import {b as b$5,a as a$3,d as d$2}from'./chunk-EBQS5T7Q.js';import {a as a$d}from'./chunk-TIZCESKY.js';import {a as a$a}from'./chunk-A5FBGRJA.js';import {a as a$x}from'./chunk-HCFOVANQ.js';import {k as k$4,e as e$9,c as c$b,a as a$M,b as b$l}from'./chunk-4HQU2GQM.js';import {j,a as a$1,n as n$5,m as m$5,o as o$4,s as s$1,l as l$5,r as r$4,p as p$6,u as u$2,t as t$3}from'./chunk-46QH3ZVI.js';import {b as b$a,a as a$g}from'./chunk-ND5YAC4T.js';import {a as a$i}from'./chunk-NMXGSVMD.js';import {c as c$4,g as g$2,b as b$c,a as a$j,e as e$8,l as l$4}from'./chunk-NNQE4DS2.js';import {b as b$2,d as d$1,a as a$4,e as e$3,z,y,j as j$2,k as k$2,m as m$1,n as n$2,o as o$1,l as l$1,t as t$2,p as p$4,B,r as r$3,h as h$5,s as s$2,A,C,u as u$1,f as f$5,x,w as w$2,v as v$2}from'./chunk-LGC4CRUF.js';export{s as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-LGC4CRUF.js';import {m as m$2,j as j$5,l as l$2}from'./chunk-YYELANJO.js';import {a as a$h}from'./chunk-GR6442P7.js';import {g as g$1,a as a$c,e as e$5}from'./chunk-FE5R6EUV.js';import {b as b$n}from'./chunk-K33JJVQZ.js';import {a as a$5}from'./chunk-AFIFZTOY.js';import {v,t,p,q,s,r as r$2,o as o$3,n as n$4,m as m$4,k as k$5,j as j$7,i as i$2,h as h$4,l as l$3,g as g$7,e as e$a,f as f$4,c as c$e,a as a$F,w as w$1}from'./chunk-ODK4LCEL.js';import {a as a$w}from'./chunk-FB7SCXAZ.js';import {h,e,g,c as c$2,a as a$9,f as f$2}from'./chunk-PKKSRXUS.js';import {a as a$f}from'./chunk-TQEMLBAG.js';import {a as a$C}from'./chunk-64XWHDZ3.js';import {c as c$7}from'./chunk-25AWHAB5.js';import {a as a$B}from'./chunk-W37NOQVG.js';import {f,e as e$1,a as a$6,d as d$8,i as i$3,g as g$9}from'./chunk-FY4X2VOE.js';import {o,b as b$3,p as p$2,q as q$2,r as r$1,m as m$6,i as i$4,j as j$8,e as e$d,g as g$a,c as c$g}from'./chunk-RGNCL5OB.js';import {c as c$h}from'./chunk-2FIX2MDC.js';import {n,f as f$1,u,p as p$1,w,q as q$1,k as k$1,t as t$1,v as v$1,j as j$3,g as g$3,h as h$2,i as i$1,e as e$6,a as a$N,b as b$m,l as l$6,o as o$5}from'./chunk-VQZ5PI5J.js';import {Command,Option}from'commander';import a$2 from'chalk';import P from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import $m from'vm';import*as M from'fs-extra';import M__default from'fs-extra';import I,{existsSync,promises,createWriteStream}from'fs';import Kn,{tmpdir,homedir}from'os';import {execa}from'execa';import At,{randomUUID,createVerify,createHash,createHmac}from'crypto';import mp from'http';import gp from'https';function od(){return j$8()}function nd(t,e){return t==="py"?["-3",...e]:e}function sd(t){return typeof t=="object"&&t!==null}async function ad(t,e,r,o=c$h()){try{let n=await execa(t,e,{cwd:r,timeout:o,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function id(t,e){let r=["-m","rapidkit",...t],o=od();for(let n of o){let s=await ad(n,nd(n,r),e?.cwd,e?.timeoutMs);if(!s.ok)continue;let i=(s.stdout??"").trim();try{let c=JSON.parse(i);return sd(c)?{ok:true,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr,data:c}:{ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}catch{return {ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}}return {ok:false}}async function xc(t,e){let r=await id(["project","detect","--path",t,"--json"],e);return !r.ok||!r.data||r.data.schema_version!==1?{ok:false,command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}:r}var Rc=new Set(["create"]),Ln=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),cd=new Set(["pip","poetry","venv","pipx","python"]);function Ac(t){return typeof t=="string"&&cd.has(t)}function Fn(t,e){return !t||Rc.has(t)?false:a$6.has(t)?true:e?.has(t)??false}function Gn(t,e=null){let r=t[0];return !r||r.startsWith("-")||Rc.has(r)||r==="init"?false:Fn(r,e)?true:t.filter(n=>!n.startsWith("-")&&!Ln.has(n)).length<=1?false:t.length>1}var Zt=P.join(Kn.homedir(),".workspairc.json"),ld=P.join(Kn.homedir(),".rapidkitrc.json"),pd=P.join(Kn.homedir(),".rapidkit","config.json");function Jn(t){try{if(!I.existsSync(t))return {};let e=I.readFileSync(t,"utf-8"),r=JSON.parse(e);return !r||typeof r!="object"||Array.isArray(r)?{}:r}catch{return {}}}function _c(t){if(process.platform!=="win32")try{I.chmodSync(t,384);}catch{}}function er(){let t=Jn(Zt),e=Jn(ld),r=Jn(pd);return I.existsSync(Zt)&&_c(Zt),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??r.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??r.aiEnabled,telemetry:t.telemetry??e.telemetry??r.telemetry}}function Co(t){let r={...er(),...t};I.writeFileSync(Zt,JSON.stringify(r,null,2),{encoding:"utf-8",mode:384}),_c(Zt);}function Nr(){return process.env.OPENAI_API_KEY||er().openaiApiKey||null}function Hn(){return er().aiEnabled!==false}function Un(){return Zt}function Ic(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async r=>{let o=r.key;o?o.startsWith("sk-")||(console.log(a$2.red(`
3
3
  \u274C Invalid API key format (should start with sk-)
4
4
  `)),process.exit(1)):o=(await b$1([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:s=>s?s.startsWith("sk-")?s.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Co({openaiApiKey:o}),console.log(a$2.green(`
5
5
  \u2705 OpenAI API key saved successfully!
@@ -112,7 +112,7 @@ Workspai Private Product Manifest
112
112
  `)),console.log(a$2.cyan("Product:"),a$2.white(t.product.slug)),console.log(a$2.cyan("Kit:"),a$2.white(t.projects[0].kit)),console.log(a$2.cyan("Modules:"),a$2.white(String(t.projects[0].modules.length))),console.log(a$2.cyan("Module gaps:"),a$2.yellow(String(t.projects[0].moduleGaps.length))),console.log(a$2.cyan("Checksum:"),a$2.white(t.factory.manifestChecksum)),console.log(a$2.gray(`
113
113
  Wrote manifest: ${P.resolve(process.cwd(),e)}
114
114
  `));}function tl(t){let e=t.command("product",{hidden:true}).description("Product Factory commands for private workspace product manifests");e.command("plan <backlog>").description("Build a deterministic Product Factory plan from a workspace backlog JSON").option("--output <file>","Write plan JSON to file").option("--kit <kit>","Default API kit for generated product manifests","fastapi.standard").option("--tier <tier>","Filter products by tier").option("--category <category>","Filter products by category").option("--limit <count>","Limit planned products").option("--json","Print JSON to stdout").action(async(r,o)=>{try{let n=o.output||Yc("--output"),s=await el({backlogPath:r,kit:o.kit,tier:o.tier,category:o.category,limit:o.limit});a$5(s,"contracts/product-factory-plan.v1.json","Product Factory plan"),n&&await Qc(n,s,true),o.json?console.log(nr(s)):Dd(s,n);}catch(n){let s=n instanceof Error?n.message:String(n);o.json?console.log(nr({ok:false,error:{message:s}})):console.error(a$2.red(`Product plan failed: ${s}`)),process.exit(1);}}),e.command("manifest").description("Create or inspect private product manifests").command("create <slug>").description("Create a private product manifest from a backlog product slug").requiredOption("--from-backlog <file>","Source workspace backlog JSON").option("--output <fileOrDir>","Manifest output file or directory").option("--kit <kit>","API kit for the generated workspace product","fastapi.standard").option("--workspace-output <dir>","Suggested root for generated product workspaces").option("--json","Print JSON to stdout").option("--force","Overwrite existing manifest file").action(async(r,o)=>{try{let n=o.output||Yc("--output");Zc(r);let s=await Md({backlogPath:o.fromBacklog,slug:r,kit:o.kit,outputRoot:o.workspaceOutput});a$5(s,"contracts/private-product-manifest.v1.json","Private product manifest");let i=Wd(n,r);await Qc(i,s,o.force===true),o.json?console.log(nr(s)):Ld(s,i);}catch(n){let s=n instanceof Error?n.message:String(n);o.json?console.log(nr({ok:false,error:{message:s}})):console.error(a$2.red(`Product manifest create failed: ${s}`)),process.exit(1);}});}var nl="rapidkit-workspace-snapshot-v1",Dr="rapidkit-workspace-snapshot-v2",Fd=nl,sl="rapidkit-project-archive-v1",yt="workspai-archive.json",Io="rapidkit-archive.json",Gd=[".workspai/workspace.json",".workspai-workspace","workspai.config.json","workspai.config.js","workspai.config.cjs","workspai.config.mjs",".rapidkit/workspace.json",".rapidkit-workspace","rapidkit.config.json","rapidkit.config.js","rapidkit.config.cjs","rapidkit.config.mjs","package.json"],Jd=new Set([".git","node_modules",".venv","dist","build","target","coverage","htmlcov",".next"]),Wr={requireReasonForDestructiveOps:false,requireSafetySnapshotForDestructiveOps:true,allowPermanentDelete:true};function ar(t=new Date){return t.toISOString().replace(/[:.]/g,"-")}function Oo(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");if(!e)throw new Error("Snapshot name must contain at least one letter or number.");return e.slice(0,120)}async function Vd(t){try{let e=await M__default.readJson(t);return e&&typeof e=="object"&&!Array.isArray(e)?e:null}catch{return null}}function Kd(t,e){if(!t)return e;let r=t.trim().toLowerCase();return ["true","yes","1","on"].includes(r)?true:["false","no","0","off"].includes(r)?false:e}async function Hd(t){let e=t$1(t,"policies.yml").find(r=>existsSync(r))??q$1(t,"policies.yml");if(!await M__default.pathExists(e))return {...Wr};try{let r=await M__default.readFile(e,"utf-8"),o=(n,s)=>{let i=r.match(new RegExp(`^\\s*${n}:\\s*([^#\\n]+)`,"m"));return Kd(i?.[1],s)};return {requireReasonForDestructiveOps:o("require_reason_for_destructive_ops",Wr.requireReasonForDestructiveOps),requireSafetySnapshotForDestructiveOps:o("require_safety_snapshot_for_destructive_ops",Wr.requireSafetySnapshotForDestructiveOps),allowPermanentDelete:o("allow_permanent_delete",Wr.allowPermanentDelete)}}catch{return {...Wr}}}function Ud(t){return q$1(t,"audit","events.jsonl")}async function nt(t,e){let r={schema:"rapidkit-workspace-audit-event-v1",id:At.randomUUID(),timestamp:new Date().toISOString(),workspacePath:t,...e},o=Ud(t);return await M__default.ensureDir(P.dirname(o)),await M__default.appendFile(o,`${JSON.stringify(r)}
115
- `,"utf-8"),r}async function No(t,e,r){let o=await Hd(t);if(o.requireReasonForDestructiveOps&&!r.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(o.requireSafetySnapshotForDestructiveOps&&r.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(r.permanent&&!o.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return o}function es(t=process.cwd()){let e=P.resolve(t),r=P.resolve(Kn.tmpdir());for(;;){if(e!==r&&k$1(e))return e;let o=P.dirname(e);if(o===e)return null;e=o;}}function _t(t){let e=t?P.resolve(t):es(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!k$1(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function al(t){let e=await Vd(t$1(t,"workspace.json").find(o=>existsSync(o))??q$1(t,"workspace.json")),r=e?.workspace_name??e?.name;return typeof r=="string"&&r.trim()?r.trim():P.basename(t)}function ir(t){return q$1(t,"snapshots")}function Lr(t){return q$1(t,"archive","projects")}function sr(t){return P.join(t,"files")}function Bd(t){return P.join(Kn.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${At.randomBytes(4).toString("hex")}`)}function qd(t,e){return P.join(ir(t),`.tmp-${process.pid}-${e}-${At.randomBytes(4).toString("hex")}`)}function $o(t,e){let r=P.relative(t,e);if(!r)return true;let o=r.split(P.sep);return (o[0]===".workspai"||o[0]===".rapidkit")&&["snapshots","archive","audit"].includes(o[1]||"")?false:!o.some(n=>Jd.has(n)||a$h(n))}async function zd(t){return (await a$i(t,{descendIntoMatchedProjects:false})).map(r=>({name:P.basename(r),relativePath:P.relative(t,r)}))}async function Yd(t,e){let r=[],o=new Set;for(let n of Gd){let s=P.join(t,n);if(!await M__default.pathExists(s))continue;let i=w(n);if(o.has(i))continue;let c=P.join(e,i);await M__default.copy(s,c,{filter:p=>$o(t,p)}),r.push(i),o.add(i);}return r}async function il(t){let e=[];async function r(o){let n=[];try{n=await M__default.readdir(o,{withFileTypes:true});}catch{return}for(let s of n){let i=P.join(o,s.name);s.isDirectory()?s.name===".rapidkit"?e.push(i):await r(i):s.isFile()&&s.name===".rapidkit-workspace"&&e.push(i);}}await r(t),e.sort((o,n)=>n.length-o.length);for(let o of e){let n=P.join(P.dirname(o),P.basename(w(P.basename(o))));await M__default.copy(o,n,{overwrite:false,errorOnExist:false}),await M__default.remove(o);}}async function cl(t,e){let r=e.schema===Dr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$5(e,r,"Workspace snapshot manifest"),await M__default.writeJson(P.join(t,"snapshot.json"),e,{spaces:2});}async function ts(t){let e=P.join(t,"snapshot.json"),r=await M__default.readJson(e);if(!r||typeof r!="object"||![nl,Dr].includes(r.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let o=r,n=o.schema===Dr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$5(o,n,"Workspace snapshot manifest"),o.mode==="project"&&(o.schema!==Dr||o.recoveryScope?.kind!=="project"||!o.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return o}async function Xd(t){let e=0,r=0,o=[t];for(;o.length>0;){let n=o.shift();if(!n)continue;let s=[];try{s=await M__default.readdir(n,{withFileTypes:true});}catch{continue}for(let i of s){let c=P.join(n,i.name);if(i.isDirectory()){o.push(c);continue}if(i.isFile())try{let p=await M__default.stat(c);e+=1,r+=p.size;}catch{}}}return {files:e,bytes:r}}async function To(t={}){let e=_t(t.workspacePath),r=t.name?t.name:`snapshot-${ar()}`,o=Oo(r),n=P.join(ir(e),o),s=Bd(o);if(await M__default.pathExists(n))throw new Error(`Snapshot already exists: ${o}`);let i=sr(s);try{await M__default.ensureDir(i);let c=t.includeProjects?"full":"metadata",p=c==="full"?["."]:await Yd(e,i);c==="full"&&(await M__default.copy(e,i,{filter:h=>$o(e,h)}),await il(i));let d={schema:Fd,name:o,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await al(e),workspacePath:e,copiedPaths:p,projects:await zd(e)};return await cl(s,d),await M__default.ensureDir(P.dirname(n)),await M__default.move(s,n,{overwrite:false}),await nt(e,{action:"snapshot.create",target:o,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:p,snapshotPath:n,projectCount:d.projects.length}}),{manifest:d,snapshotPath:n}}catch(c){throw await M__default.remove(s),await nt(e,{action:"snapshot.create",target:o,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function Mo(t){let e=P.resolve(t.workspacePath),r=P.resolve(t.projectPath),o=P.relative(e,r);if(!o||o.startsWith("..")||P.isAbsolute(o)||o.split(P.sep).some(h=>h===".workspai"||h===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${r}`);let n=P.basename(r),s=Oo(`${t.namePrefix}-${n}-${ar()}-${At.randomBytes(3).toString("hex")}`),i=P.join(ir(e),s),c=qd(e,s),p=P.join(sr(c),o),d=false;try{await M__default.ensureDir(P.dirname(p)),t.moveSource?(await M__default.move(r,p,{overwrite:false}),d=true):await M__default.copy(r,p,{overwrite:false,errorOnExist:true,filter:u=>$o(r,u)});let h={schema:Dr,name:s,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await al(e),workspacePath:e,copiedPaths:[o],projects:[{name:n,relativePath:o}],recoveryScope:{kind:"project",projectName:n,relativePath:o}};return await cl(c,h),await M__default.move(c,i,{overwrite:false}),await nt(e,{action:"snapshot.create",target:s,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[o],snapshotPath:i,projectCount:1}}),{manifest:h,snapshotPath:i}}catch(h){if(d&&!await M__default.pathExists(r)){let u=await M__default.pathExists(p)?p:P.join(sr(i),o);await M__default.pathExists(u)&&(await M__default.ensureDir(P.dirname(r)),await M__default.move(u,r,{overwrite:false}));}throw await M__default.remove(c),await M__default.remove(i),await nt(e,{action:"snapshot.create",target:s,status:"failed",reason:t.reason,details:{mode:"project",error:h instanceof Error?h.message:String(h)}}),h}}async function ll(t){let e=_t(t.workspacePath),r=P.join(ir(e),Oo(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await ts(r),n=sr(r),s=await Xd(n);return {manifest:o,snapshotPath:r,filesRoot:n,estimatedFileCount:s.files,estimatedBytes:s.bytes}}async function pl(t={}){let e=_t(t.workspacePath),r=ir(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let i=P.join(r,s.name);try{n.push({...await ts(i),snapshotPath:i});}catch{}}return n.sort((s,i)=>i.createdAt.localeCompare(s.createdAt))}var Qd=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function Zd(t){let e=P.dirname(t.workspacePath),r=P.basename(t.workspacePath),o=`${ar()}-${At.randomBytes(4).toString("hex")}`,n=P.join(e,`.${r}.restore-staging-${o}`),s=P.join(e,`.${r}.pre-restore-${o}`),i=P.join(e,`.${r}.restore-failed-${o}`),c=[],p=false,d=false;try{await M__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:h=>$o(t.filesRoot,h)}),await il(n),await M__default.rename(t.workspacePath,s),p=true,await M__default.rename(n,t.workspacePath),d=true;for(let h of Qd){let u=P.join(s,h);if(!await M__default.pathExists(u))continue;let f=P.join(t.workspacePath,h);if(await M__default.pathExists(f))throw new Error(`Full restore operational path collision: ${h}`);await M__default.ensureDir(P.dirname(f)),await M__default.rename(u,f),c.push(h);}return s}catch(h){for(let u of [...c].reverse()){let f=P.join(t.workspacePath,u),v=P.join(s,u);await M__default.pathExists(f)&&(await M__default.ensureDir(P.dirname(v)),await M__default.rename(f,v));}throw d&&await M__default.pathExists(t.workspacePath)&&await M__default.rename(t.workspacePath,i),p&&await M__default.pathExists(s)&&await M__default.rename(s,t.workspacePath),await M__default.remove(i),await M__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${h instanceof Error?h.message:String(h)}`)}}async function dl(t,e){let r=t.manifest.recoveryScope?.relativePath;if(!r)return;let o=P.join(sr(t.snapshotPath),r),n=P.join(e,r);await M__default.pathExists(o)&&!await M__default.pathExists(n)&&(await M__default.ensureDir(P.dirname(n)),await M__default.move(o,n,{overwrite:false})),await M__default.remove(t.snapshotPath);}async function ul(t){let e=_t(t.workspacePath),r=P.join(ir(e),Oo(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await ts(r),n=sr(r),s=o.mode==="full"?["."]:Array.from(new Set(o.copiedPaths.map(p=>{let d=w(p);return d.startsWith(".workspai/")?".workspai":d})));if(t.dryRun)return await nt(e,{action:"snapshot.restore",target:o.name,status:"planned",reason:t.reason,details:{restoredPaths:s}}),{workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await No(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let i;if(o.mode==="full")i=await Zd({workspacePath:e,filesRoot:n,snapshotName:o.name});else if(o.mode==="project"){let p=o.recoveryScope?.relativePath;if(!p)throw new Error(`Project recovery snapshot is missing recoveryScope: ${o.name}`);let d=P.join(n,p),h=P.join(e,p),u=await M__default.pathExists(h),f,v=P.join(P.dirname(h),`.${P.basename(h)}.pre-restore-${process.pid}-${At.randomBytes(4).toString("hex")}`),k=false;u&&t.safetySnapshot!==false?(f=await Mo({workspacePath:e,projectPath:h,namePrefix:`pre-restore-${o.name}`,reason:`Automatic project recovery snapshot before restoring ${o.name}`,moveSource:true}),i=f.snapshotPath):u&&(await M__default.rename(h,v),k=true);let E=P.join(P.dirname(h),`.${P.basename(h)}.restore-${process.pid}-${At.randomBytes(4).toString("hex")}`);try{await M__default.copy(d,E,{overwrite:false,errorOnExist:true}),await M__default.rename(E,h),k&&await M__default.remove(v);}catch(S){throw await M__default.remove(E),k&&await M__default.pathExists(v)&&(await M__default.remove(h),await M__default.rename(v,h)),f&&await dl(f,e),S}}else t.safetySnapshot!==false&&(i=(await To({workspacePath:e,name:`pre-restore-${o.name}-${ar()}`,reason:`Automatic safety snapshot before restoring ${o.name}`,includeProjects:false})).snapshotPath);if(o.mode==="metadata"){let p=new Set;for(let d of o.copiedPaths){let h=w(d);p.has(h)||(await M__default.copy(P.join(n,d),P.join(e,h),{overwrite:true,errorOnExist:false}),p.add(h));}}let c={workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:false,safetySnapshotPath:i};return await nt(e,{action:"snapshot.restore",target:o.name,status:"succeeded",reason:t.reason,details:{restoredPaths:s,safetySnapshotPath:i}}),c}function ml(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function gl(t,e){let r=ml(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(t,r);if(o.startsWith(`${P.resolve(t)}${P.sep}`)&&await M__default.pathExists(o))return o;let s=(await a$i(t,{descendIntoMatchedProjects:false})).filter(i=>{let c=P.relative(t,i);return P.basename(i)===r||c===r});if(s.length===0){let c=(await a$j(t)).find(p=>{let d=p.relativePath?.replace(/\\/g,"/");return p.name===r||d===r.replace(/\\/g,"/")||P.resolve(p.path)===P.resolve(r)});throw c&&!P.resolve(c.path).startsWith(`${P.resolve(t)}${P.sep}`)?new Error(`Project ${e} is a linked external project and cannot be archived or deleted by workspace lifecycle commands. Only managed projects contained by the workspace support archive/delete; manage the external source or its workspace registration explicitly.`):new Error(`Project not found in workspace: ${e}`)}if(s.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return s[0]}async function rs(t){let{syncWorkspaceProjects:e}=await import('./workspace-E3MM3AIE.js');await e(t,true);let{syncWorkspaceContract:r}=await import('./workspace-contract-E7GVWM7W.js');await r({workspacePath:t,strict:true});let{syncWorkspaceProjectLenses:o}=await import('./project-intelligence-lens-QTQEZXUY.js');await o({workspacePath:t,mode:"managed"});}function eu(t,e){let r=At.randomBytes(4).toString("hex");return P.join(Lr(t),`${e}-${ar()}-${r}`)}async function fl(t){let e=hl(t),r=await M__default.readJson(e);if(!r||typeof r!="object"||r.schema!==sl)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$5(r,"contracts/project-archive.v1.json","Project archive manifest"),r}function hl(t){return [yt,Io].map(e=>P.join(t,e)).find(e=>M__default.existsSync(e))??P.join(t,yt)}async function os(t={}){let e=_t(t.workspacePath),r=Lr(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let i=P.join(r,s.name),c=[yt,Io].map(p=>P.join(i,p)).find(p=>M__default.existsSync(p))??P.join(i,yt);try{n.push({...await fl(i),archivePath:i,manifestPath:c});}catch{}}return n.sort((s,i)=>i.archivedAt.localeCompare(s.archivedAt))}async function tu(t,e){let r=ml(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(Lr(t),r);if(o.startsWith(`${P.resolve(Lr(t))}${P.sep}`)&&(await M__default.pathExists(P.join(o,yt))||await M__default.pathExists(P.join(o,Io))))return o;let s=(await os({workspacePath:t})).filter(i=>P.basename(i.archivePath)===r||i.projectName===r||P.relative(Lr(t),i.archivePath)===r);if(s.length===0)throw new Error(`Archived project not found: ${e}`);if(s.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return s[0].archivePath}async function ns(t){let e=_t(t.workspacePath),r=await gl(e,t.project),o=P.basename(r),n=eu(e,o),s=P.join(n,yt),i=`${n}.tmp-${process.pid}`,c=P.join(i,yt);for(let u of [yt,Io])if(await M__default.pathExists(P.join(r,u)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${u}`);if(t.dryRun)return await nt(e,{action:"project.archive",target:o,status:"planned",reason:t.reason,details:{projectPath:r,archivePath:n}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,dryRun:true};await No(e,"project.archive",{reason:t.reason,safetySnapshot:true});let p=await Mo({workspacePath:e,projectPath:r,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${o}`,moveSource:false}),d={schema:sl,projectName:o,originalPath:r,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:p.snapshotPath};a$5(d,"contracts/project-archive.v1.json","Project archive manifest");let h=false;try{await M__default.ensureDir(P.dirname(n)),await M__default.move(r,i,{overwrite:false}),h=true,await M__default.writeJson(c,d,{spaces:2}),await M__default.rename(i,n);}catch(u){if(h&&!await M__default.pathExists(r)){let f=await M__default.pathExists(i)?i:n;await M__default.pathExists(f)&&(await M__default.remove(P.join(f,yt)),await M__default.move(f,r,{overwrite:false}));}throw await M__default.remove(i),u}return await c$4(e,[r]),await rs(e),await nt(e,{action:"project.archive",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,archivePath:n,manifestPath:s,safetySnapshotPath:p.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,safetySnapshotPath:p.snapshotPath,dryRun:false}}async function yl(t){if(!t.permanent)return ns(t);let e=_t(t.workspacePath),r=await gl(e,t.project),o=P.basename(r);if(t.confirm!==o)throw new Error(`Permanent delete requires --confirm ${o}`);if(t.dryRun)return await nt(e,{action:"project.delete",target:o,status:"planned",reason:t.reason,details:{projectPath:r,permanent:true}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",dryRun:true};await No(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await Mo({workspacePath:e,projectPath:r,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${o}`,moveSource:true});return await c$4(e,[r]),await rs(e),await nt(e,{action:"project.delete",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function wl(t){let e=_t(t.workspacePath),r=await tu(e,t.archive),o=await fl(r),n=t.targetName?.trim()||o.projectName,s=P.join(e,n);if(!s.startsWith(`${P.resolve(e)}${P.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await M__default.pathExists(s)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${s}`);if(t.dryRun)return await nt(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:r,projectPath:s}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:P.join(r,yt),dryRun:true};await No(e,"project.restore",{reason:t.reason,safetySnapshot:true});let i=await M__default.pathExists(s),c=i?await Mo({workspacePath:e,projectPath:s,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await To({workspacePath:e,name:`pre-restore-project-${n}-${ar()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),p=hl(r),d=q$1(e,"audit","restores",`${P.basename(r)}.json`);try{await M__default.move(r,s,{overwrite:false}),await M__default.ensureDir(P.dirname(d)),await M__default.move(P.join(s,P.basename(p)),d,{overwrite:false});}catch(h){throw await M__default.pathExists(s)&&(await M__default.pathExists(d)&&await M__default.move(d,P.join(s,P.basename(p)),{overwrite:false}),await M__default.pathExists(r)||await M__default.move(s,r,{overwrite:false})),i&&await dl(c,e),h}return await rs(e),await nt(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:r,projectPath:s,restoreReceiptPath:d,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:d,safetySnapshotPath:c.snapshotPath,dryRun:false}}var ou="rapidkit.infra-stack.v1",vl=s.infraPlan.schemaVersion,cr=".workspai/infra/docker-compose.yml",lr=t.infraPlan,is=".workspai/infra/.env.example";function nu(){let t=P.dirname(fileURLToPath(import.meta.url)),e=[P.join(t,"../../contracts/infra-stack.v1.json"),P.join(t,"../contracts/infra-stack.v1.json")];for(let r of e)if(I.existsSync(r))return r;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var as=null;function Lt(t){if(as)return as;let e=nu(),r=I.readFileSync(e,"utf-8"),o=JSON.parse(r);if(o.schemaVersion!==ou)throw new Error(`Unsupported infra stack schema: ${o.schemaVersion}`);return su(o),(as=o),o}function su(t){let e=new Set(Object.keys(t.services));for(let[r,o]of Object.entries(t.moduleMappings)){if(!Array.isArray(o))throw new Error(`Invalid moduleMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`moduleMappings/${r} references unknown service '${n}'`)}for(let[r,o]of Object.entries(t.envVarMappings)){if(!Array.isArray(o))throw new Error(`Invalid envVarMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`envVarMappings/${r} references unknown service '${n}'`)}}function Pl(t,e){let r=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[r]||[]}function pr(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function bl(t,e){let r={};for(let o of e){let n=t.services[o];n&&Object.assign(r,n.connectionEnv);}return r}async function iu(t){let e=P.join(t,"registry.json");if(!await M__default.pathExists(e))return [];try{let o=(await M__default.readJson(e)).installed_modules||[];return [...new Set(o.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function cu(t){let e=P.join(t,".env.example");if(!await M__default.pathExists(e))return [];try{let r=await M__default.readFile(e,"utf-8"),o=[];for(let n of r.split(`
115
+ `,"utf-8"),r}async function No(t,e,r){let o=await Hd(t);if(o.requireReasonForDestructiveOps&&!r.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(o.requireSafetySnapshotForDestructiveOps&&r.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(r.permanent&&!o.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return o}function es(t=process.cwd()){let e=P.resolve(t),r=P.resolve(Kn.tmpdir());for(;;){if(e!==r&&k$1(e))return e;let o=P.dirname(e);if(o===e)return null;e=o;}}function _t(t){let e=t?P.resolve(t):es(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!k$1(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function al(t){let e=await Vd(t$1(t,"workspace.json").find(o=>existsSync(o))??q$1(t,"workspace.json")),r=e?.workspace_name??e?.name;return typeof r=="string"&&r.trim()?r.trim():P.basename(t)}function ir(t){return q$1(t,"snapshots")}function Lr(t){return q$1(t,"archive","projects")}function sr(t){return P.join(t,"files")}function Bd(t){return P.join(Kn.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${At.randomBytes(4).toString("hex")}`)}function qd(t,e){return P.join(ir(t),`.tmp-${process.pid}-${e}-${At.randomBytes(4).toString("hex")}`)}function $o(t,e){let r=P.relative(t,e);if(!r)return true;let o=r.split(P.sep);return (o[0]===".workspai"||o[0]===".rapidkit")&&["snapshots","archive","audit"].includes(o[1]||"")?false:!o.some(n=>Jd.has(n)||a$h(n))}async function zd(t){return (await a$i(t,{descendIntoMatchedProjects:false})).map(r=>({name:P.basename(r),relativePath:P.relative(t,r)}))}async function Yd(t,e){let r=[],o=new Set;for(let n of Gd){let s=P.join(t,n);if(!await M__default.pathExists(s))continue;let i=w(n);if(o.has(i))continue;let c=P.join(e,i);await M__default.copy(s,c,{filter:p=>$o(t,p)}),r.push(i),o.add(i);}return r}async function il(t){let e=[];async function r(o){let n=[];try{n=await M__default.readdir(o,{withFileTypes:true});}catch{return}for(let s of n){let i=P.join(o,s.name);s.isDirectory()?s.name===".rapidkit"?e.push(i):await r(i):s.isFile()&&s.name===".rapidkit-workspace"&&e.push(i);}}await r(t),e.sort((o,n)=>n.length-o.length);for(let o of e){let n=P.join(P.dirname(o),P.basename(w(P.basename(o))));await M__default.copy(o,n,{overwrite:false,errorOnExist:false}),await M__default.remove(o);}}async function cl(t,e){let r=e.schema===Dr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$5(e,r,"Workspace snapshot manifest"),await M__default.writeJson(P.join(t,"snapshot.json"),e,{spaces:2});}async function ts(t){let e=P.join(t,"snapshot.json"),r=await M__default.readJson(e);if(!r||typeof r!="object"||![nl,Dr].includes(r.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let o=r,n=o.schema===Dr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$5(o,n,"Workspace snapshot manifest"),o.mode==="project"&&(o.schema!==Dr||o.recoveryScope?.kind!=="project"||!o.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return o}async function Xd(t){let e=0,r=0,o=[t];for(;o.length>0;){let n=o.shift();if(!n)continue;let s=[];try{s=await M__default.readdir(n,{withFileTypes:true});}catch{continue}for(let i of s){let c=P.join(n,i.name);if(i.isDirectory()){o.push(c);continue}if(i.isFile())try{let p=await M__default.stat(c);e+=1,r+=p.size;}catch{}}}return {files:e,bytes:r}}async function To(t={}){let e=_t(t.workspacePath),r=t.name?t.name:`snapshot-${ar()}`,o=Oo(r),n=P.join(ir(e),o),s=Bd(o);if(await M__default.pathExists(n))throw new Error(`Snapshot already exists: ${o}`);let i=sr(s);try{await M__default.ensureDir(i);let c=t.includeProjects?"full":"metadata",p=c==="full"?["."]:await Yd(e,i);c==="full"&&(await M__default.copy(e,i,{filter:h=>$o(e,h)}),await il(i));let d={schema:Fd,name:o,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await al(e),workspacePath:e,copiedPaths:p,projects:await zd(e)};return await cl(s,d),await M__default.ensureDir(P.dirname(n)),await M__default.move(s,n,{overwrite:false}),await nt(e,{action:"snapshot.create",target:o,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:p,snapshotPath:n,projectCount:d.projects.length}}),{manifest:d,snapshotPath:n}}catch(c){throw await M__default.remove(s),await nt(e,{action:"snapshot.create",target:o,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function Mo(t){let e=P.resolve(t.workspacePath),r=P.resolve(t.projectPath),o=P.relative(e,r);if(!o||o.startsWith("..")||P.isAbsolute(o)||o.split(P.sep).some(h=>h===".workspai"||h===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${r}`);let n=P.basename(r),s=Oo(`${t.namePrefix}-${n}-${ar()}-${At.randomBytes(3).toString("hex")}`),i=P.join(ir(e),s),c=qd(e,s),p=P.join(sr(c),o),d=false;try{await M__default.ensureDir(P.dirname(p)),t.moveSource?(await M__default.move(r,p,{overwrite:false}),d=true):await M__default.copy(r,p,{overwrite:false,errorOnExist:true,filter:u=>$o(r,u)});let h={schema:Dr,name:s,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await al(e),workspacePath:e,copiedPaths:[o],projects:[{name:n,relativePath:o}],recoveryScope:{kind:"project",projectName:n,relativePath:o}};return await cl(c,h),await M__default.move(c,i,{overwrite:false}),await nt(e,{action:"snapshot.create",target:s,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[o],snapshotPath:i,projectCount:1}}),{manifest:h,snapshotPath:i}}catch(h){if(d&&!await M__default.pathExists(r)){let u=await M__default.pathExists(p)?p:P.join(sr(i),o);await M__default.pathExists(u)&&(await M__default.ensureDir(P.dirname(r)),await M__default.move(u,r,{overwrite:false}));}throw await M__default.remove(c),await M__default.remove(i),await nt(e,{action:"snapshot.create",target:s,status:"failed",reason:t.reason,details:{mode:"project",error:h instanceof Error?h.message:String(h)}}),h}}async function ll(t){let e=_t(t.workspacePath),r=P.join(ir(e),Oo(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await ts(r),n=sr(r),s=await Xd(n);return {manifest:o,snapshotPath:r,filesRoot:n,estimatedFileCount:s.files,estimatedBytes:s.bytes}}async function pl(t={}){let e=_t(t.workspacePath),r=ir(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let i=P.join(r,s.name);try{n.push({...await ts(i),snapshotPath:i});}catch{}}return n.sort((s,i)=>i.createdAt.localeCompare(s.createdAt))}var Qd=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function Zd(t){let e=P.dirname(t.workspacePath),r=P.basename(t.workspacePath),o=`${ar()}-${At.randomBytes(4).toString("hex")}`,n=P.join(e,`.${r}.restore-staging-${o}`),s=P.join(e,`.${r}.pre-restore-${o}`),i=P.join(e,`.${r}.restore-failed-${o}`),c=[],p=false,d=false;try{await M__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:h=>$o(t.filesRoot,h)}),await il(n),await M__default.rename(t.workspacePath,s),p=true,await M__default.rename(n,t.workspacePath),d=true;for(let h of Qd){let u=P.join(s,h);if(!await M__default.pathExists(u))continue;let f=P.join(t.workspacePath,h);if(await M__default.pathExists(f))throw new Error(`Full restore operational path collision: ${h}`);await M__default.ensureDir(P.dirname(f)),await M__default.rename(u,f),c.push(h);}return s}catch(h){for(let u of [...c].reverse()){let f=P.join(t.workspacePath,u),v=P.join(s,u);await M__default.pathExists(f)&&(await M__default.ensureDir(P.dirname(v)),await M__default.rename(f,v));}throw d&&await M__default.pathExists(t.workspacePath)&&await M__default.rename(t.workspacePath,i),p&&await M__default.pathExists(s)&&await M__default.rename(s,t.workspacePath),await M__default.remove(i),await M__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${h instanceof Error?h.message:String(h)}`)}}async function dl(t,e){let r=t.manifest.recoveryScope?.relativePath;if(!r)return;let o=P.join(sr(t.snapshotPath),r),n=P.join(e,r);await M__default.pathExists(o)&&!await M__default.pathExists(n)&&(await M__default.ensureDir(P.dirname(n)),await M__default.move(o,n,{overwrite:false})),await M__default.remove(t.snapshotPath);}async function ul(t){let e=_t(t.workspacePath),r=P.join(ir(e),Oo(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await ts(r),n=sr(r),s=o.mode==="full"?["."]:Array.from(new Set(o.copiedPaths.map(p=>{let d=w(p);return d.startsWith(".workspai/")?".workspai":d})));if(t.dryRun)return await nt(e,{action:"snapshot.restore",target:o.name,status:"planned",reason:t.reason,details:{restoredPaths:s}}),{workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await No(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let i;if(o.mode==="full")i=await Zd({workspacePath:e,filesRoot:n,snapshotName:o.name});else if(o.mode==="project"){let p=o.recoveryScope?.relativePath;if(!p)throw new Error(`Project recovery snapshot is missing recoveryScope: ${o.name}`);let d=P.join(n,p),h=P.join(e,p),u=await M__default.pathExists(h),f,v=P.join(P.dirname(h),`.${P.basename(h)}.pre-restore-${process.pid}-${At.randomBytes(4).toString("hex")}`),k=false;u&&t.safetySnapshot!==false?(f=await Mo({workspacePath:e,projectPath:h,namePrefix:`pre-restore-${o.name}`,reason:`Automatic project recovery snapshot before restoring ${o.name}`,moveSource:true}),i=f.snapshotPath):u&&(await M__default.rename(h,v),k=true);let E=P.join(P.dirname(h),`.${P.basename(h)}.restore-${process.pid}-${At.randomBytes(4).toString("hex")}`);try{await M__default.copy(d,E,{overwrite:false,errorOnExist:true}),await M__default.rename(E,h),k&&await M__default.remove(v);}catch(S){throw await M__default.remove(E),k&&await M__default.pathExists(v)&&(await M__default.remove(h),await M__default.rename(v,h)),f&&await dl(f,e),S}}else t.safetySnapshot!==false&&(i=(await To({workspacePath:e,name:`pre-restore-${o.name}-${ar()}`,reason:`Automatic safety snapshot before restoring ${o.name}`,includeProjects:false})).snapshotPath);if(o.mode==="metadata"){let p=new Set;for(let d of o.copiedPaths){let h=w(d);p.has(h)||(await M__default.copy(P.join(n,d),P.join(e,h),{overwrite:true,errorOnExist:false}),p.add(h));}}let c={workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:false,safetySnapshotPath:i};return await nt(e,{action:"snapshot.restore",target:o.name,status:"succeeded",reason:t.reason,details:{restoredPaths:s,safetySnapshotPath:i}}),c}function ml(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function gl(t,e){let r=ml(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(t,r);if(o.startsWith(`${P.resolve(t)}${P.sep}`)&&await M__default.pathExists(o))return o;let s=(await a$i(t,{descendIntoMatchedProjects:false})).filter(i=>{let c=P.relative(t,i);return P.basename(i)===r||c===r});if(s.length===0){let c=(await a$j(t)).find(p=>{let d=p.relativePath?.replace(/\\/g,"/");return p.name===r||d===r.replace(/\\/g,"/")||P.resolve(p.path)===P.resolve(r)});throw c&&!P.resolve(c.path).startsWith(`${P.resolve(t)}${P.sep}`)?new Error(`Project ${e} is a linked external project and cannot be archived or deleted by workspace lifecycle commands. Only managed projects contained by the workspace support archive/delete; manage the external source or its workspace registration explicitly.`):new Error(`Project not found in workspace: ${e}`)}if(s.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return s[0]}async function rs(t){let{syncWorkspaceProjects:e}=await import('./workspace-ROUEA3RT.js');await e(t,true);let{syncWorkspaceContract:r}=await import('./workspace-contract-2V2BI6A3.js');await r({workspacePath:t,strict:true});let{syncWorkspaceProjectLenses:o}=await import('./project-intelligence-lens-6Q6XSUDJ.js');await o({workspacePath:t,mode:"managed"});}function eu(t,e){let r=At.randomBytes(4).toString("hex");return P.join(Lr(t),`${e}-${ar()}-${r}`)}async function fl(t){let e=hl(t),r=await M__default.readJson(e);if(!r||typeof r!="object"||r.schema!==sl)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$5(r,"contracts/project-archive.v1.json","Project archive manifest"),r}function hl(t){return [yt,Io].map(e=>P.join(t,e)).find(e=>M__default.existsSync(e))??P.join(t,yt)}async function os(t={}){let e=_t(t.workspacePath),r=Lr(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let i=P.join(r,s.name),c=[yt,Io].map(p=>P.join(i,p)).find(p=>M__default.existsSync(p))??P.join(i,yt);try{n.push({...await fl(i),archivePath:i,manifestPath:c});}catch{}}return n.sort((s,i)=>i.archivedAt.localeCompare(s.archivedAt))}async function tu(t,e){let r=ml(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(Lr(t),r);if(o.startsWith(`${P.resolve(Lr(t))}${P.sep}`)&&(await M__default.pathExists(P.join(o,yt))||await M__default.pathExists(P.join(o,Io))))return o;let s=(await os({workspacePath:t})).filter(i=>P.basename(i.archivePath)===r||i.projectName===r||P.relative(Lr(t),i.archivePath)===r);if(s.length===0)throw new Error(`Archived project not found: ${e}`);if(s.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return s[0].archivePath}async function ns(t){let e=_t(t.workspacePath),r=await gl(e,t.project),o=P.basename(r),n=eu(e,o),s=P.join(n,yt),i=`${n}.tmp-${process.pid}`,c=P.join(i,yt);for(let u of [yt,Io])if(await M__default.pathExists(P.join(r,u)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${u}`);if(t.dryRun)return await nt(e,{action:"project.archive",target:o,status:"planned",reason:t.reason,details:{projectPath:r,archivePath:n}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,dryRun:true};await No(e,"project.archive",{reason:t.reason,safetySnapshot:true});let p=await Mo({workspacePath:e,projectPath:r,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${o}`,moveSource:false}),d={schema:sl,projectName:o,originalPath:r,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:p.snapshotPath};a$5(d,"contracts/project-archive.v1.json","Project archive manifest");let h=false;try{await M__default.ensureDir(P.dirname(n)),await M__default.move(r,i,{overwrite:false}),h=true,await M__default.writeJson(c,d,{spaces:2}),await M__default.rename(i,n);}catch(u){if(h&&!await M__default.pathExists(r)){let f=await M__default.pathExists(i)?i:n;await M__default.pathExists(f)&&(await M__default.remove(P.join(f,yt)),await M__default.move(f,r,{overwrite:false}));}throw await M__default.remove(i),u}return await c$4(e,[r]),await rs(e),await nt(e,{action:"project.archive",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,archivePath:n,manifestPath:s,safetySnapshotPath:p.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,safetySnapshotPath:p.snapshotPath,dryRun:false}}async function yl(t){if(!t.permanent)return ns(t);let e=_t(t.workspacePath),r=await gl(e,t.project),o=P.basename(r);if(t.confirm!==o)throw new Error(`Permanent delete requires --confirm ${o}`);if(t.dryRun)return await nt(e,{action:"project.delete",target:o,status:"planned",reason:t.reason,details:{projectPath:r,permanent:true}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",dryRun:true};await No(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await Mo({workspacePath:e,projectPath:r,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${o}`,moveSource:true});return await c$4(e,[r]),await rs(e),await nt(e,{action:"project.delete",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function wl(t){let e=_t(t.workspacePath),r=await tu(e,t.archive),o=await fl(r),n=t.targetName?.trim()||o.projectName,s=P.join(e,n);if(!s.startsWith(`${P.resolve(e)}${P.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await M__default.pathExists(s)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${s}`);if(t.dryRun)return await nt(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:r,projectPath:s}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:P.join(r,yt),dryRun:true};await No(e,"project.restore",{reason:t.reason,safetySnapshot:true});let i=await M__default.pathExists(s),c=i?await Mo({workspacePath:e,projectPath:s,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await To({workspacePath:e,name:`pre-restore-project-${n}-${ar()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),p=hl(r),d=q$1(e,"audit","restores",`${P.basename(r)}.json`);try{await M__default.move(r,s,{overwrite:false}),await M__default.ensureDir(P.dirname(d)),await M__default.move(P.join(s,P.basename(p)),d,{overwrite:false});}catch(h){throw await M__default.pathExists(s)&&(await M__default.pathExists(d)&&await M__default.move(d,P.join(s,P.basename(p)),{overwrite:false}),await M__default.pathExists(r)||await M__default.move(s,r,{overwrite:false})),i&&await dl(c,e),h}return await rs(e),await nt(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:r,projectPath:s,restoreReceiptPath:d,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:d,safetySnapshotPath:c.snapshotPath,dryRun:false}}var ou="rapidkit.infra-stack.v1",vl=s.infraPlan.schemaVersion,cr=".workspai/infra/docker-compose.yml",lr=t.infraPlan,is=".workspai/infra/.env.example";function nu(){let t=P.dirname(fileURLToPath(import.meta.url)),e=[P.join(t,"../../contracts/infra-stack.v1.json"),P.join(t,"../contracts/infra-stack.v1.json")];for(let r of e)if(I.existsSync(r))return r;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var as=null;function Lt(t){if(as)return as;let e=nu(),r=I.readFileSync(e,"utf-8"),o=JSON.parse(r);if(o.schemaVersion!==ou)throw new Error(`Unsupported infra stack schema: ${o.schemaVersion}`);return su(o),(as=o),o}function su(t){let e=new Set(Object.keys(t.services));for(let[r,o]of Object.entries(t.moduleMappings)){if(!Array.isArray(o))throw new Error(`Invalid moduleMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`moduleMappings/${r} references unknown service '${n}'`)}for(let[r,o]of Object.entries(t.envVarMappings)){if(!Array.isArray(o))throw new Error(`Invalid envVarMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`envVarMappings/${r} references unknown service '${n}'`)}}function Pl(t,e){let r=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[r]||[]}function pr(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function bl(t,e){let r={};for(let o of e){let n=t.services[o];n&&Object.assign(r,n.connectionEnv);}return r}async function iu(t){let e=P.join(t,"registry.json");if(!await M__default.pathExists(e))return [];try{let o=(await M__default.readJson(e)).installed_modules||[];return [...new Set(o.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function cu(t){let e=P.join(t,".env.example");if(!await M__default.pathExists(e))return [];try{let r=await M__default.readFile(e,"utf-8"),o=[];for(let n of r.split(`
116
116
  `)){let s=n.trim();if(!s||s.startsWith("#"))continue;let i=s.match(/^([A-Z0-9_]+)=/);i?.[1]&&o.push(i[1]);}return o}catch{return []}}async function lu(t){let e=t$1(t,"infra","overrides.json").find(r=>existsSync(r));if(!e)return [];try{let r=await M__default.readJson(e);return Array.isArray(r.services)?[...new Set(r.services.filter(o=>typeof o=="string"&&o.trim().length>0))]:[]}catch{return []}}async function pu(t$1){let e=await g$1(t$1,t.workspaceContract);if(!e)return [];try{let r=await M__default.readJson(e),o=[];for(let n of r.projects||[]){let s=typeof n.slug=="string"?n.slug:"unknown";for(let i of n.contracts?.env||[])typeof i=="string"&&i.trim()&&o.push({project:s,env:i.trim().toUpperCase()});}return o}catch{return []}}function Wo(t,e,r,o){t.add(r),e.push(o);}async function jl(t){let e=P.resolve(t.workspacePath),r=t.contract||Lt(),o=new Set,n=[],s=new Set,i=new Set,c=new Set,p=await l$4(e);for(let d of p){let h=P.dirname(P.dirname(d)),u=P.basename(h);for(let f of await iu(h)){s.add(f);for(let v of Pl(r,f))Wo(o,n,v,{kind:"module",value:f,project:u});}for(let f of await cu(h)){i.add(f);for(let v of pr(r,f))Wo(o,n,v,{kind:"env-var",value:f,project:u});}}for(let d of await pu(e)){i.add(d.env);for(let h of pr(r,d.env))Wo(o,n,h,{kind:"contract-env",value:d.env,project:d.project});}for(let d of await lu(e))c.add(d),Wo(o,n,d,{kind:"override",value:d});return {modules:[...s].sort(),envVars:[...i].sort(),overrides:[...c].sort(),sources:n,serviceIds:[...o].sort()}}function du(t){let e=t.trim();if(!e||e.startsWith("#"))return null;let r=e.indexOf("=");if(r<=0)return null;let o=e.slice(0,r).trim();if(!/^[A-Z0-9_]+$/.test(o))return null;let n=e.slice(r+1).trim();(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))&&(n=n.slice(1,-1));let s=n.match(/^\$\{[A-Z0-9_]+:-([^}]+)\}$/),i=(s?s[1]:n).trim();return i?{key:o,value:i}:null}async function uu(t){if(!await M__default.pathExists(t))return {};try{let e=await M__default.readFile(t,"utf-8"),r={};for(let o of e.split(`
117
117
  `)){let n=du(o);n&&(r[n.key]=n.value);}return r}catch{return {}}}async function Sl(t){let e={},r=await l$4(t.workspacePath);for(let o of r){let n=P.dirname(P.dirname(o)),s=await uu(P.join(n,".env.example"));for(let[i,c]of Object.entries(s))pr(t.contract,i).length>0&&(e[i]=c);}return e}function El(t,e){return t.filter(r=>pr(e,r).length>0).sort()}function xl(t){let e=t.RAPIDKIT_DB_POSTGRES_URL||t.DATABASE_URL;if(e?.startsWith("postgresql://"))try{let r=new URL(e),o=r.pathname.replace(/^\//,"");return {POSTGRES_USER:decodeURIComponent(r.username||"postgres"),POSTGRES_PASSWORD:decodeURIComponent(r.password||"postgres"),POSTGRES_DB:o||"postgres"}}catch{return}}function Rl(t){let e=t.POSTGRES_USER||"postgres",r=t.POSTGRES_DB||"postgres";return ["CMD-SHELL",`pg_isready -U ${e} -d ${r}`]}function mu(t){return /[:#{}[\],&*!|>'"%@`]/.test(t)||t.includes(`
118
118
  `)?JSON.stringify(t):t}function Al(t,e){return Object.entries(t).map(([r,o])=>`${e}${r}: ${mu(o)}`).join(`
@@ -144,15 +144,15 @@ Workspai infra status
144
144
  `))),i.exitCode!==0&&(i.stderr&&process.stderr.write(i.stderr),process.exit(i.exitCode)),r.strict&&/Restarting|Exit|unhealthy/i.test(i.stdout)&&(console.log(""),console.log(a$2.red("One or more infra containers are not healthy.")),console.log(a$2.gray(`Inspect logs with: docker logs workspai-postgres (or redis/mailpit)
145
145
  `)),process.exit(1));}catch(o){console.error(a$2.red(`
146
146
  \u274C ${o instanceof Error?o.message:String(o)}
147
- `)),process.exit(1);}});}function ju(t){return t.strict&&t.state==="blocked"?2:void 0}function Ye(t){let e=b$5({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:true});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return P.resolve(e.workspacePath)}async function fs(t){let e=P.resolve(process.cwd(),t);if(!await M__default.pathExists(e))throw new Error(`JSON input does not exist: ${t}`);return M__default.readJson(e)}function Cu(t,e){if(e){console.log(JSON.stringify(t,null,2));return}let r=t.capsule.status==="sealed",o=t.capsule.status==="blocked",n=r?a$2.green("\u2713"):o?a$2.red("\u25A0"):a$2.cyan("\u25C6");console.log(`${n} Proof-Carrying Change \xB7 ${t.capsule.status}`),console.log(a$2.bold(` ${t.changeId}`)),console.log(a$2.gray(` State: ${t.state}`)),console.log(a$2.gray(` Assurance: ${t.capsule.assurances.filter(s=>s.status==="passed").length}/${t.capsule.assurances.length} passed`)),t.capsule.remainingUncertainty.length>0&&console.log(a$2.yellow(` Uncertainty: ${t.capsule.remainingUncertainty.join(" ")}`)),console.log(a$2.gray(` Capsule: ${t.artifacts.capsule}`));for(let s of t.nextActions)console.log(a$2.gray(` Next: ${s}`));}async function wt(t,e,r){try{let o=await e();Cu(o,t.json);let n=r?.(o);n!==void 0&&(process.exitCode=n);}catch(o){let n=o instanceof Error?o.message:String(o);t.json?console.log(JSON.stringify({schemaVersion:"workspai.change-error.v1",status:"error",message:n},null,2)):console.error(a$2.red(`Proof-Carrying Change failed: ${n}`)),process.exitCode=1;}}var Su=new Set(["filesystem","command","configuration","dependency","external"]);function Eu(t){let e=[...new Set(t.split(",").map(r=>r.trim()).filter(Boolean))];for(let r of e)if(!Su.has(r))throw new Error(`Unsupported effect class: ${r}`);return e}function Xe(t){return t.option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit a versioned machine-readable result")}function Dl(t){let e=t.command("change").description("Create and verify tamper-evident, architecture-aware change capsules");Xe(e.command("begin").description("Pin an active Goal and architecture baseline")).option("--goal <goal-id>","Require this Goal Pack to be the active Goal").action(async s=>{await wt(s,()=>b$o({workspacePath:Ye(s),goalId:s.goal}));}),Xe(e.command("list").description("List discoverable change capsules and integrity")).action(async s=>{try{let i=await k({workspacePath:Ye(s)});if(s.json){console.log(JSON.stringify(i,null,2));return}console.log(a$2.bold(`Proof-Carrying Changes \xB7 ${i.summary.total}`)),i.changes.length===0&&console.log(a$2.gray(" No changes recorded."));for(let c of i.changes){let p=c.valid?c.status==="sealed"?a$2.green("\u2713"):a$2.cyan("\u25C6"):a$2.red("\u25A0");console.log(`${p} ${c.changeId} \xB7 ${c.status} \xB7 ${c.assurance.passed}/${c.assurance.total}`);}}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(a$2.red(c)),process.exitCode=1;}}),Xe(e.command("predict").description("Attach a noncanonical architecture prediction")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <prediction.json>","Typed predicted architecture change JSON").action(async s=>{await wt(s,async()=>c$i({workspacePath:Ye(s),changeId:s.change,prediction:o$6(await fs(s.file))}));}),Xe(e.command("authorize").description("Grant bounded effect capabilities")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--effects <classes>","Comma-separated filesystem,command,configuration,dependency,external classes").option("--granted-by <identity>","Human or policy identity granting authorization","operator").action(async s=>{await wt(s,()=>d$9({workspacePath:Ye(s),changeId:s.change,effectClasses:Eu(s.effects),grantedBy:s.grantedBy}));}),Xe(e.command("resume").description("Resume a blocked transaction with human intent")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--to <state>","Resume target: authorized, executing, or verifying").requiredOption("--reason <text>","Durable reason for resuming").option("--actor <identity>","Human identity resuming the change","operator").action(async s=>{await wt(s,()=>{if(!["authorized","executing","verifying"].includes(s.to))throw new Error("--to must be authorized, executing, or verifying.");return e$e({workspacePath:Ye(s),changeId:s.change,resumeTo:s.to,reason:s.reason,actorId:s.actor})});});let r=e.command("effect").description("Record typed observed effects");Xe(r.command("record").description("Append an idempotent effect receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed effect receipt JSON").action(async s=>{await wt(s,async()=>f$7({workspacePath:Ye(s),changeId:s.change,receipt:p$7(await fs(s.file))}));});let o=e.command("verification").description("Record independent Goal-criterion verification");Xe(o.command("record").description("Append an exact-generation verification receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed verification receipt JSON").action(async s=>{await wt(s,async()=>g$b({workspacePath:Ye(s),changeId:s.change,receipt:q$4(await fs(s.file))}));}),Xe(e.command("status").description("Inspect the derived transaction and assurance state")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{await wt(s,()=>j$9({workspacePath:Ye(s),changeId:s.change,operation:"status"}));}),Xe(e.command("explain").description("Explain proof, uncertainty, and next actions")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{await wt(s,()=>j$9({workspacePath:Ye(s),changeId:s.change,operation:"explain"}));}),Xe(e.command("verify").description("Re-observe architecture and verify exact effects")).requiredOption("--change <change-id>","Proof-carrying change id").option("--strict","Treat advisory Workspace Verify findings as blockers").option("--no-refresh","Use current canonical intelligence without refreshing it").action(async s=>{await wt(s,()=>i$5({workspacePath:Ye(s),changeId:s.change,strict:s.strict,refresh:s.refresh}),i=>ju({strict:s.strict===true,state:i.state}));}),Xe(e.command("abort").description("Terminate an open change without deleting evidence")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--reason <text>","Durable reason for aborting the change").option("--actor <identity>","Human identity aborting the change","operator").action(async s=>{await wt(s,()=>l$7({workspacePath:Ye(s),changeId:s.change,reason:s.reason,actorId:s.actor}));});let n=e.command("capsule").description("Validate or export a change capsule");Xe(n.command("validate").description("Validate capsule and referenced local evidence")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{try{let i=await m({workspacePath:Ye(s),changeId:s.change});s.json?console.log(JSON.stringify(i,null,2)):console.log(i.valid?a$2.green(`\u2713 Capsule ${s.change} is valid.`):a$2.red(`\u25A0 Capsule ${s.change} is invalid: ${i.errors.join("; ")}`)),i.valid||(process.exitCode=1);}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({valid:false,errors:[c]},null,2)):console.error(a$2.red(c)),process.exitCode=1;}}),Xe(n.command("export").description("Export a validated portable capsule manifest")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--output <path>","Workspace-contained export path").action(async s=>{try{let i=await n$1({workspacePath:Ye(s),changeId:s.change,outputPath:s.output});s.json?console.log(JSON.stringify(i,null,2)):console.log(a$2.green(`\u2713 Capsule exported: ${i.outputPath}`));}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(a$2.red(c)),process.exitCode=1;}});}var Go=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,r,o=3){let n=[],s=[{dir:e,depth:0}],i=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;s.length>0;){let c=s.shift();if(!c||c.depth>o)continue;let p=[];try{p=I.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let d of p){let h=P.join(c.dir,d.name);if(d.isDirectory()){i.has(d.name)||s.push({dir:h,depth:c.depth+1});continue}d.name.toLowerCase().endsWith(r.toLowerCase())&&n.push(h);}}return n.sort()}findProjectFile(e){let r=this.findFilesBySuffix(e,".csproj");return r.find(o=>!o.toLowerCase().includes(".tests.csproj"))||r[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(o=>o.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let r=await this.ensureDotnetInstalled(e);return r||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=await this.run("dotnet",o?["restore",o]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=o?["watch","--project",o,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",o?["test",o]:["test"],e)}async runBuild(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["build",o,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["run","--project",o]:["run"],e)}async runLint(e){if(!b$3()&&w$2(e,"lint"))return this.run("make",["lint"],e);let r=P.join(e,"Directory.Build.props");if(I.existsSync(r)&&I.readFileSync(r,"utf-8").includes("EnforceCodeStyleInBuild")){let o=await this.ensureDotnetInstalled(e);if(o)return o;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$3()&&w$2(e,"format"))return this.run("make",["format"],e);let r=await this.ensureDotnetInstalled(e);return r||(I.existsSync(P.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var Jo=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(e){let r=e;for(;;){if(I.existsSync(P.join(r,".workspai-workspace"))||I.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(s=>I.existsSync(s));if(!n)return "isolated";try{let c=I.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","go"):P.join(e,".workspai","cache","go"),i=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=P.join(s,"mod"),process.env.GOCACHE=P.join(s,"build"),r().finally(()=>{typeof i>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=i,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&I.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&I.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let r=await this.ensureGoInstalled(e);if(r)return r;let o=P.join(e,"Makefile");if(!b$3()&&I.existsSync(o)&&w$2(e,"run"))return this.run("make",["run"],e);let n=v$2(e);return n?this.run("go",["run",n],e):{exitCode:1,message:"No unambiguous Go run target was detected. Add a root main package, keep one cmd/<name>/main.go target, or declare a Makefile run target."}})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let o=(b$3()?[P.join(e,"server.exe"),P.join(e,"server")]:[P.join(e,"server")]).find(i=>I.existsSync(i));if(o)return this.run(o,[],e);let n=await this.ensureGoInstalled(e);if(n)return n;let s=v$2(e);return s?this.run("go",["run",s],e):{exitCode:1,message:"No unambiguous Go start target was detected. Add a root main package, keep one cmd/<name>/main.go target, declare a Makefile run target, or provide the built server binary."}})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$2(e,"lint")?this.run("make",["lint"],e):I.existsSync(P.join(e,".golangci.yml"))||I.existsSync(P.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$2(e,"fmt")?this.run("make",["fmt"],e):!b$3()&&w$2(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var Vo=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return true;try{return (I.statSync(e).mode&73)!==0}catch{return false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return true;try{return I.chmodSync(e,493),this.isExecutable(e)}catch{return false}}resolveJavaCommand(e){let r=process.env.JAVA_HOME?.trim();if(!r)return "java";let o=P.join(r,"bin",process.platform==="win32"?"java.exe":"java");return I.existsSync(o)?o:"java"}parseMajorJavaVersion(e){if(!e)return null;let o=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(o,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let r=P.join(e,"pom.xml");if(!I.existsSync(r))return 21;try{let n=I.readFileSync(r,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,r){try{let o=await execa(e,["-version"],{cwd:r,timeout:5e3,reject:false});if(o.exitCode!==0)return null;let n=`${o.stdout||""}
147
+ `)),process.exit(1);}});}function ju(t){return t.strict&&t.state==="blocked"?2:void 0}function Ye(t){let e=b$5({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:!t.workspace});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return P.resolve(e.workspacePath)}async function fs(t){let e=P.resolve(process.cwd(),t);if(!await M__default.pathExists(e))throw new Error(`JSON input does not exist: ${t}`);return M__default.readJson(e)}function Cu(t,e){if(e){console.log(JSON.stringify(t,null,2));return}let r=t.capsule.status==="sealed",o=t.capsule.status==="blocked",n=r?a$2.green("\u2713"):o?a$2.red("\u25A0"):a$2.cyan("\u25C6");console.log(`${n} Proof-Carrying Change \xB7 ${t.capsule.status}`),console.log(a$2.bold(` ${t.changeId}`)),console.log(a$2.gray(` State: ${t.state}`)),console.log(a$2.gray(` Assurance: ${t.capsule.assurances.filter(s=>s.status==="passed").length}/${t.capsule.assurances.length} passed`)),t.capsule.remainingUncertainty.length>0&&console.log(a$2.yellow(` Uncertainty: ${t.capsule.remainingUncertainty.join(" ")}`)),console.log(a$2.gray(` Capsule: ${t.artifacts.capsule}`));for(let s of t.nextActions)console.log(a$2.gray(` Next: ${s}`));}async function wt(t,e,r){try{let o=await e();Cu(o,t.json);let n=r?.(o);n!==void 0&&(process.exitCode=n);}catch(o){let n=o instanceof Error?o.message:String(o);t.json?console.log(JSON.stringify({schemaVersion:"workspai.change-error.v1",status:"error",message:n},null,2)):console.error(a$2.red(`Proof-Carrying Change failed: ${n}`)),process.exitCode=1;}}var Su=new Set(["filesystem","command","configuration","dependency","external"]);function Eu(t){let e=[...new Set(t.split(",").map(r=>r.trim()).filter(Boolean))];for(let r of e)if(!Su.has(r))throw new Error(`Unsupported effect class: ${r}`);return e}function Xe(t){return t.option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit a versioned machine-readable result")}function Dl(t){let e=t.command("change").description("Create and verify tamper-evident, architecture-aware change capsules");Xe(e.command("begin").description("Pin an active Goal and architecture baseline")).option("--goal <goal-id>","Require this Goal Pack to be the active Goal").action(async s=>{await wt(s,()=>b$o({workspacePath:Ye(s),goalId:s.goal}));}),Xe(e.command("list").description("List discoverable change capsules and integrity")).action(async s=>{try{let i=await k({workspacePath:Ye(s)});if(s.json){console.log(JSON.stringify(i,null,2));return}console.log(a$2.bold(`Proof-Carrying Changes \xB7 ${i.summary.total}`)),i.changes.length===0&&console.log(a$2.gray(" No changes recorded."));for(let c of i.changes){let p=c.valid?c.status==="sealed"?a$2.green("\u2713"):a$2.cyan("\u25C6"):a$2.red("\u25A0");console.log(`${p} ${c.changeId} \xB7 ${c.status} \xB7 ${c.assurance.passed}/${c.assurance.total}`);}}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(a$2.red(c)),process.exitCode=1;}}),Xe(e.command("predict").description("Attach a noncanonical architecture prediction")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <prediction.json>","Typed predicted architecture change JSON").action(async s=>{await wt(s,async()=>c$i({workspacePath:Ye(s),changeId:s.change,prediction:o$6(await fs(s.file))}));}),Xe(e.command("authorize").description("Grant bounded effect capabilities")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--effects <classes>","Comma-separated filesystem,command,configuration,dependency,external classes").option("--granted-by <identity>","Human or policy identity granting authorization","operator").action(async s=>{await wt(s,()=>d$9({workspacePath:Ye(s),changeId:s.change,effectClasses:Eu(s.effects),grantedBy:s.grantedBy}));}),Xe(e.command("resume").description("Resume a blocked transaction with human intent")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--to <state>","Resume target: authorized, executing, or verifying").requiredOption("--reason <text>","Durable reason for resuming").option("--actor <identity>","Human identity resuming the change","operator").action(async s=>{await wt(s,()=>{if(!["authorized","executing","verifying"].includes(s.to))throw new Error("--to must be authorized, executing, or verifying.");return e$e({workspacePath:Ye(s),changeId:s.change,resumeTo:s.to,reason:s.reason,actorId:s.actor})});});let r=e.command("effect").description("Record typed observed effects");Xe(r.command("record").description("Append an idempotent effect receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed effect receipt JSON").action(async s=>{await wt(s,async()=>f$7({workspacePath:Ye(s),changeId:s.change,receipt:p$7(await fs(s.file))}));});let o=e.command("verification").description("Record independent Goal-criterion verification");Xe(o.command("record").description("Append an exact-generation verification receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed verification receipt JSON").action(async s=>{await wt(s,async()=>g$b({workspacePath:Ye(s),changeId:s.change,receipt:q$4(await fs(s.file))}));}),Xe(e.command("status").description("Inspect the derived transaction and assurance state")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{await wt(s,()=>j$9({workspacePath:Ye(s),changeId:s.change,operation:"status"}));}),Xe(e.command("explain").description("Explain proof, uncertainty, and next actions")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{await wt(s,()=>j$9({workspacePath:Ye(s),changeId:s.change,operation:"explain"}));}),Xe(e.command("verify").description("Re-observe architecture and verify exact effects")).requiredOption("--change <change-id>","Proof-carrying change id").option("--strict","Treat advisory Workspace Verify findings as blockers").option("--no-refresh","Use current canonical intelligence without refreshing it").action(async s=>{await wt(s,()=>i$5({workspacePath:Ye(s),changeId:s.change,strict:s.strict,refresh:s.refresh}),i=>ju({strict:s.strict===true,state:i.state}));}),Xe(e.command("abort").description("Terminate an open change without deleting evidence")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--reason <text>","Durable reason for aborting the change").option("--actor <identity>","Human identity aborting the change","operator").action(async s=>{await wt(s,()=>l$7({workspacePath:Ye(s),changeId:s.change,reason:s.reason,actorId:s.actor}));});let n=e.command("capsule").description("Validate or export a change capsule");Xe(n.command("validate").description("Validate capsule and referenced local evidence")).requiredOption("--change <change-id>","Proof-carrying change id").action(async s=>{try{let i=await m({workspacePath:Ye(s),changeId:s.change});s.json?console.log(JSON.stringify(i,null,2)):console.log(i.valid?a$2.green(`\u2713 Capsule ${s.change} is valid.`):a$2.red(`\u25A0 Capsule ${s.change} is invalid: ${i.errors.join("; ")}`)),i.valid||(process.exitCode=1);}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({valid:false,errors:[c]},null,2)):console.error(a$2.red(c)),process.exitCode=1;}}),Xe(n.command("export").description("Export a validated portable capsule manifest")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--output <path>","Workspace-contained export path").action(async s=>{try{let i=await n$1({workspacePath:Ye(s),changeId:s.change,outputPath:s.output});s.json?console.log(JSON.stringify(i,null,2)):console.log(a$2.green(`\u2713 Capsule exported: ${i.outputPath}`));}catch(i){let c=i instanceof Error?i.message:String(i);s.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(a$2.red(c)),process.exitCode=1;}});}var Go=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,r,o=3){let n=[],s=[{dir:e,depth:0}],i=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;s.length>0;){let c=s.shift();if(!c||c.depth>o)continue;let p=[];try{p=I.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let d of p){let h=P.join(c.dir,d.name);if(d.isDirectory()){i.has(d.name)||s.push({dir:h,depth:c.depth+1});continue}d.name.toLowerCase().endsWith(r.toLowerCase())&&n.push(h);}}return n.sort()}findProjectFile(e){let r=this.findFilesBySuffix(e,".csproj");return r.find(o=>!o.toLowerCase().includes(".tests.csproj"))||r[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(o=>o.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let r=await this.ensureDotnetInstalled(e);return r||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=await this.run("dotnet",o?["restore",o]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=o?["watch","--project",o,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",o?["test",o]:["test"],e)}async runBuild(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["build",o,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["run","--project",o]:["run"],e)}async runLint(e){if(!b$3()&&w$2(e,"lint"))return this.run("make",["lint"],e);let r=P.join(e,"Directory.Build.props");if(I.existsSync(r)&&I.readFileSync(r,"utf-8").includes("EnforceCodeStyleInBuild")){let o=await this.ensureDotnetInstalled(e);if(o)return o;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$3()&&w$2(e,"format"))return this.run("make",["format"],e);let r=await this.ensureDotnetInstalled(e);return r||(I.existsSync(P.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var Jo=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(e){let r=e;for(;;){if(I.existsSync(P.join(r,".workspai-workspace"))||I.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(s=>I.existsSync(s));if(!n)return "isolated";try{let c=I.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","go"):P.join(e,".workspai","cache","go"),i=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=P.join(s,"mod"),process.env.GOCACHE=P.join(s,"build"),r().finally(()=>{typeof i>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=i,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&I.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&I.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let r=await this.ensureGoInstalled(e);if(r)return r;let o=P.join(e,"Makefile");if(!b$3()&&I.existsSync(o)&&w$2(e,"run"))return this.run("make",["run"],e);let n=v$2(e);return n?this.run("go",["run",n],e):{exitCode:1,message:"No unambiguous Go run target was detected. Add a root main package, keep one cmd/<name>/main.go target, or declare a Makefile run target."}})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let o=(b$3()?[P.join(e,"server.exe"),P.join(e,"server")]:[P.join(e,"server")]).find(i=>I.existsSync(i));if(o)return this.run(o,[],e);let n=await this.ensureGoInstalled(e);if(n)return n;let s=v$2(e);return s?this.run("go",["run",s],e):{exitCode:1,message:"No unambiguous Go start target was detected. Add a root main package, keep one cmd/<name>/main.go target, declare a Makefile run target, or provide the built server binary."}})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$2(e,"lint")?this.run("make",["lint"],e):I.existsSync(P.join(e,".golangci.yml"))||I.existsSync(P.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$2(e,"fmt")?this.run("make",["fmt"],e):!b$3()&&w$2(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var Vo=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return true;try{return (I.statSync(e).mode&73)!==0}catch{return false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return true;try{return I.chmodSync(e,493),this.isExecutable(e)}catch{return false}}resolveJavaCommand(e){let r=process.env.JAVA_HOME?.trim();if(!r)return "java";let o=P.join(r,"bin",process.platform==="win32"?"java.exe":"java");return I.existsSync(o)?o:"java"}parseMajorJavaVersion(e){if(!e)return null;let o=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(o,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let r=P.join(e,"pom.xml");if(!I.existsSync(r))return 21;try{let n=I.readFileSync(r,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,r){try{let o=await execa(e,["-version"],{cwd:r,timeout:5e3,reject:false});if(o.exitCode!==0)return null;let n=`${o.stdout||""}
148
148
  ${o.stderr||""}`,s=n.match(/version\s+"([^"]+)"/i);if(s?.[1])return this.parseMajorJavaVersion(s[1]);let i=n.match(/(?:openjdk|java)\s+(\d+(?:[._]\d+)?)/i);return i?.[1]?this.parseMajorJavaVersion(i[1]):null}catch{return null}}parseMavenVersion(e){if(!e)return null;let r=e.match(/Apache Maven\s+(\d+)\.(\d+)\.(\d+)/i);return r?[Number.parseInt(r[1],10),Number.parseInt(r[2],10),Number.parseInt(r[3],10)]:null}isMavenVersionAtLeast(e,r){for(let o=0;o<3;o+=1){if(e[o]>r[o])return true;if(e[o]<r[o])return false}return true}async checkSystemMavenVersion(e){try{let r=await execa("mvn",["-version"],{cwd:e,timeout:5e3,reject:false});if(r.exitCode!==0)return {exitCode:r.exitCode||1,message:"Maven is required and must be available on PATH (3.9+)."};let o=this.parseMavenVersion(`${r.stdout||""}
149
149
  ${r.stderr||""}`);return o?this.isMavenVersionAtLeast(o,[3,9,0])?{exitCode:0}:{exitCode:1,message:`Maven ${o.join(".")} detected; Maven 3.9+ is required.`}:{exitCode:1,message:"Unable to parse Maven version. Ensure Maven 3.9+ is installed and retry."}}catch{return {exitCode:1,message:"Maven version check failed. Install Maven 3.9+ and ensure mvn is on PATH."}}}shouldUseGradleNoDaemon(){return process.env.CI==="true"||process.env.RAPIDKIT_GRADLE_NO_DAEMON==="1"}inspectJavaProject(e){let r=I.existsSync(P.join(e,"pom.xml")),o=I.existsSync(P.join(e,"mvnw"))||I.existsSync(P.join(e,"mvnw.cmd")),n=I.existsSync(P.join(e,"build.gradle"))||I.existsSync(P.join(e,"build.gradle.kts"))||I.existsSync(P.join(e,"settings.gradle"))||I.existsSync(P.join(e,"settings.gradle.kts")),s=I.existsSync(P.join(e,"gradlew"))||I.existsSync(P.join(e,"gradlew.bat"));return {hasMavenProject:r||o,hasMavenWrapper:o,hasGradleProject:n||s,hasGradleWrapper:s}}findWorkspaceRoot(e){let r=e;for(;;){if(I.existsSync(P.join(r,".workspai-workspace"))||I.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(s=>I.existsSync(s));if(!n)return "isolated";try{let c=I.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}buildToolCommand(e){return this.isGradleProject(e)?this.gradleCommand(e):this.mavenCommand(e)}mavenCommand(e){let r=P.join(e,"mvnw.cmd");if(process.platform==="win32"&&I.existsSync(r))return {command:r,baseArgs:[]};let o=P.join(e,"mvnw");return I.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"mvn",baseArgs:[]}}gradleCommand(e){let r=P.join(e,"gradlew.bat");if(process.platform==="win32"&&I.existsSync(r))return {command:r,baseArgs:[]};let o=P.join(e,"gradlew");return I.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"gradle",baseArgs:[]}}isGradleProject(e){return this.inspectJavaProject(e).hasGradleProject}isMavenProject(e){return this.inspectJavaProject(e).hasMavenProject}discoverWorkspaceJavaProjects(e){let r=[],o=new Set,n=[e];for(;n.length>0;){let s=n.shift();if(!s||o.has(s))continue;o.add(s);let i=[];try{i=I.readdirSync(s,{withFileTypes:true});}catch{continue}for(let c of i){if(!c.isDirectory()||c.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(c.name))continue;let p=P.join(s,c.name),d=this.inspectJavaProject(p);(d.hasMavenProject||d.hasGradleProject)&&r.push(p),n.push(p);}}return r}withJavaCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","java","m2"):P.join(e,".workspai","cache","java","m2"),i=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","java","gradle"):P.join(e,".workspai","cache","java","gradle"),c=process.env.MAVEN_OPTS,p=process.env.GRADLE_USER_HOME,d=`-Dmaven.repo.local=${s}`;return process.env.MAVEN_OPTS=c?`${c} ${d}`:d,process.env.GRADLE_USER_HOME=i,r().finally(()=>{typeof c>"u"?delete process.env.MAVEN_OPTS:process.env.MAVEN_OPTS=c,typeof p>"u"?delete process.env.GRADLE_USER_HOME:process.env.GRADLE_USER_HOME=p;})}async runBuildTool(e,r,o=true){return this.withJavaCacheEnv(e,async()=>{try{let{command:n,baseArgs:s}=this.buildToolCommand(e),i=await this.runCommand(n,[...s,...r],e);if(i===0||!o)return {exitCode:i};let c=I.existsSync(P.join(e,"pom.xml")),p=I.existsSync(P.join(e,"build.gradle"))||I.existsSync(P.join(e,"build.gradle.kts"));return {exitCode:i,message:c||p?"Java build failed. Verify pom.xml/build.gradle syntax and dependencies, then retry.":"Java build tool is not installed or not available on PATH. Install Maven/Gradle and JDK 21+, or commit mvnw/gradlew wrapper scripts."}}catch(n){return {exitCode:1,message:`Java command execution failed: ${n instanceof Error?n.message:String(n)}. Verify pom.xml/build.gradle integrity and wrapper permissions.`}}})}resolveJarPath(e){let r=[P.join(e,"target"),P.join(e,"build","libs")];for(let o of r){if(!I.existsSync(o))continue;let s=I.readdirSync(o).filter(i=>i.toLowerCase().endsWith(".jar")).find(i=>!i.toLowerCase().endsWith("-sources.jar")&&!i.toLowerCase().endsWith("-javadoc.jar")&&!i.toLowerCase().endsWith("-plain.jar"));if(s)return P.join(o,s)}return null}commandArgsFor(e,r){if(e==="gradle"){let o=this.shouldUseGradleNoDaemon()?["--no-daemon"]:[];return r==="init"?[...o,"dependencies"]:r==="dev"?[...o,"bootRun"]:r==="test"?[...o,"test"]:[...o,"bootJar"]}return r==="init"?["-B","-q","-DskipTests","dependency:go-offline"]:r==="dev"?["spring-boot:run"]:r==="test"?["test"]:["-DskipTests","package"]}detectBuildTool(e){return this.isGradleProject(e)?"gradle":"maven"}async checkPrereqs(){let e=process.cwd(),r=this.resolveJavaCommand(e),o=await this.runCommand(r,["-version"],e);if(o!==0)return {exitCode:o,message:"JDK 21+ is required. Ensure java is on PATH or JAVA_HOME/bin/java is available."};if(this.isMavenProject(e)){let c=this.readRequiredJavaMajor(e),p=await this.detectInstalledJavaMajor(r,e);if(p!==null&&p<c)return {exitCode:1,message:`Detected Java ${p}, but project requires Java ${c}+.`};let d=P.join(process.env.JAVA_HOME||"","release");if(process.env.JAVA_HOME&&I.existsSync(d))try{let u=I.readFileSync(d,"utf-8").match(/^JAVA_VERSION="([^"]+)"/m),f=this.parseMajorJavaVersion(u?.[1]);if(f!==null&&f<c)return {exitCode:1,message:`Detected JAVA_HOME version ${f}, but project requires Java ${c}+.`}}catch{}}if(this.isMavenProject(e)||this.isGradleProject(e)){let c=this.detectBuildTool(e),p=c==="gradle"?["--version"]:["-version"],d=await this.runBuildTool(e,p);return d.exitCode!==0?d:c==="maven"&&!this.inspectJavaProject(e).hasMavenWrapper?this.checkSystemMavenVersion(e):d}let n=this.findWorkspaceRoot(e);if(n&&n===e){let c=this.discoverWorkspaceJavaProjects(n);if(c.length>0){let p=c.reduce((u,f)=>Math.max(u,this.readRequiredJavaMajor(f)),0);if(p>0){let u=await this.detectInstalledJavaMajor(r,e);if(u!==null&&u<p){let f=c.filter(v=>this.readRequiredJavaMajor(v)>u).map(v=>P.relative(e,v)).join(", ");return {exitCode:1,message:`Detected Java ${u}, but workspace project(s) [${f}] require Java ${p}+.`}}}let d=false,h=false;for(let u of c){let f=this.inspectJavaProject(u);f.hasMavenProject&&!f.hasMavenWrapper&&(d=true),f.hasGradleProject&&!f.hasGradleWrapper&&(h=true);}if(d){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(u!==0)return {exitCode:u,message:"Maven is required for one or more workspace Java projects without Maven Wrapper. Install Maven 3.9+, or add mvnw/mvnw.cmd to those projects."};let f=await this.checkSystemMavenVersion(e);if(f.exitCode!==0)return f}if(h){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));if(u!==0)return {exitCode:u,message:"Gradle is required for one or more workspace Java projects without Gradle Wrapper. Install Gradle 8+, or add gradlew/gradlew.bat to those projects."}}return {exitCode:0}}}let s=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(s===0){let c=await this.checkSystemMavenVersion(e);return c.exitCode!==0?c:{exitCode:0}}let i=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));return i===0?{exitCode:0}:{exitCode:s||i||1,message:"Neither Maven nor Gradle is available on PATH. Install one of them, or use mvnw/gradlew wrappers in project roots."}}async warmSetupCache(e){return this.withJavaCacheEnv(e,async()=>{try{let r=process.env.MAVEN_OPTS?.match(/-Dmaven\.repo\.local=([^\s]+)/)?.[1];return r&&I.mkdirSync(r,{recursive:true}),process.env.GRADLE_USER_HOME&&I.mkdirSync(process.env.GRADLE_USER_HOME,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Java cache directories"}}})}async initProject(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"init"))}async runDev(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"dev"))}async runTest(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"test"))}async runBuild(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"build"))}async runStart(e){let r=this.resolveJarPath(e);if(r)return {exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",r],e)};let o=await this.runBuild(e);if(o.exitCode!==0)return o;let n=this.resolveJarPath(e);return n?{exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",n],e)}:{exitCode:1,message:"Spring Boot build completed, but no runnable JAR was found under target/ or build/libs/. Verify build output naming and packaging plugins."}}async runLint(e){if(w$2(e,"lint"))return {exitCode:await this.runCommand("make",["lint"],e)};let r=P.join(e,"pom.xml");if(I.existsSync(r)){let o=I.readFileSync(r,"utf-8");if(o.includes("spotless-maven-plugin"))return this.runBuildTool(e,["spotless:check"]);if(o.includes("checkstyle"))return this.runBuildTool(e,["checkstyle:check"])}return {exitCode:1,message:"No Java lint tooling detected. Add a Makefile lint target or configure checkstyle in Maven/Gradle."}}async runFormat(e){if(w$2(e,"format"))return {exitCode:await this.runCommand("make",["format"],e)};let r=P.join(e,"pom.xml");return I.existsSync(r)&&I.readFileSync(r,"utf-8").includes("spotless-maven-plugin")?this.runBuildTool(e,["spotless:apply"]):["build.gradle","build.gradle.kts"].map(n=>P.join(e,n)).filter(n=>I.existsSync(n)).some(n=>I.readFileSync(n,"utf-8").includes("spotless"))?this.runBuildTool(e,["spotlessApply"]):{exitCode:1,message:"No Java format tooling detected. Add a Makefile format target or configure Spotless in Maven/Gradle."}}async doctorHints(e){return ["Install JDK 21+ and Maven/Gradle (or commit mvnw/gradlew wrappers) for reliable local builds.","Run npx workspai init after dependency changes to warm Java caches for your build tool.","Use SPRING_PROFILES_ACTIVE to switch environments without changing source config."]}};var Ko=class{constructor(e){this.runCommand=e;}runCommand;runtime="node";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}findWorkspaceRoot(e){let r=e;for(;;){if(I.existsSync(P.join(r,".workspai-workspace"))||I.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(s=>I.existsSync(s));if(!n)return "isolated";try{let c=I.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,r,o){let n=this.resolveDependencyMode(e),s=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=n==="isolated"?P.join(e,".workspai","cache","node"):P.join(s||e,".workspai","cache","node"),c=process.env.npm_config_cache,p=process.env.npm_config_store_dir,d=process.env.BUN_INSTALL_CACHE_DIR,h=process.env.RAPIDKIT_DEP_SHARING_MODE,u=process.env.RAPIDKIT_WORKSPACE_PATH;return process.env.RAPIDKIT_DEP_SHARING_MODE=n,s&&(process.env.RAPIDKIT_WORKSPACE_PATH=s),r==="bun"?process.env.BUN_INSTALL_CACHE_DIR=P.join(i,"bun-cache"):r==="pnpm"?(process.env.npm_config_store_dir=P.join(i,"pnpm-store"),process.env.npm_config_cache=P.join(i,"pnpm-cache")):r==="yarn"?process.env.npm_config_cache=P.join(i,"yarn-cache"):process.env.npm_config_cache=P.join(i,"npm-cache"),o().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof p>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=p,typeof d>"u"?delete process.env.BUN_INSTALL_CACHE_DIR:process.env.BUN_INSTALL_CACHE_DIR=d,typeof h>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=h,typeof u>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=u;})}detectPackageManager(e){if(I.existsSync(P.join(e,"bun.lock"))||I.existsSync(P.join(e,"bun.lockb")))return "bun";if(I.existsSync(P.join(e,"package-lock.json")))return "npm";if(I.existsSync(P.join(e,"pnpm-lock.yaml")))return "pnpm";if(I.existsSync(P.join(e,"yarn.lock")))return "yarn";if(!this.commandAvailable("npm")){if(this.commandAvailable("pnpm"))return "pnpm";if(this.commandAvailable("yarn"))return "yarn"}return "npm"}hasPinnedPackageManager(e){return I.existsSync(P.join(e,"package-lock.json"))||I.existsSync(P.join(e,"bun.lock"))||I.existsSync(P.join(e,"bun.lockb"))||I.existsSync(P.join(e,"pnpm-lock.yaml"))||I.existsSync(P.join(e,"yarn.lock"))}availablePackageManagers(e){let r=this.detectPackageManager(e);return this.hasPinnedPackageManager(e)?[r]:[r,...["npm","pnpm","yarn","bun"].filter(n=>n!==r&&this.commandAvailable(n))]}commandAvailable(e){let r=e$d(e);return spawnSync(r.command,[...r.prefixArgs,"--version"],{stdio:"ignore",shell:c$g(),env:g$a()}).status===0}scriptArgs(e,r){return e==="npm"?["run-script",r,"--foreground-scripts"]:["run",r]}async runScriptWithFallback(e,r){let o={exitCode:1};for(let n of this.availablePackageManagers(e))if(o=await this.withDependencyEnv(e,n,()=>this.run(n,this.scriptArgs(n,r),e)),o.exitCode===0)return o;return o}async runLifecycle(e,r){let o=j$2(e),n=m$2(e,o),s=u$1(e,r,{framework:n.key});return s?this.runScriptWithFallback(e,s.scriptName):{exitCode:1,message:`No npm script available for \`${r}\`. Add a "${r}" script to package.json.`}}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let r=this.detectPackageManager(e);return this.withDependencyEnv(e,r,async()=>{try{return process.env.npm_config_cache&&I.mkdirSync(process.env.npm_config_cache,{recursive:true}),r==="pnpm"&&process.env.npm_config_store_dir&&I.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let r=this.detectPackageManager(e),o=this.resolveDependencyMode(e),n=o==="shared-runtime-caches"||o==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,r,()=>this.run(r,n,e))}async runDev(e){return this.runLifecycle(e,"dev")}async runTest(e){return this.runLifecycle(e,"test")}async runBuild(e){return this.runLifecycle(e,"build")}async runStart(e){return this.runLifecycle(e,"start")}async runLint(e){return this.runLifecycle(e,"lint")}async runFormat(e){return this.runLifecycle(e,"format")}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var Uo=class{constructor(e){this.runCore=e;}runCore;runtime="python";async run(e,r){return {exitCode:await this.withPythonCacheEnv(r,()=>this.runCore(e,r))}}findWorkspaceRoot(e){let r=e;for(;;){if(I.existsSync(P.join(r,".workspai-workspace"))||I.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(s=>I.existsSync(s));if(!n)return "isolated";try{let c=I.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","python"):P.join(e,".workspai","cache","python"),i=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=P.join(s,"pip"),process.env.POETRY_CACHE_DIR=P.join(s,"poetry"),r().finally(()=>{typeof i>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=i,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),r=await this.run(["doctor","check"],e);return r.exitCode===0?r:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx workspai doctor workspace" for a full workspace scan.','Use "npx workspai init" after adding or changing modules.',"Use `npx workspai <command>` from the project root to avoid environment drift."]}};var Bo=class{constructor(e){this.runCommand=e;}runCommand;runtime="php";async run(e,r,o){let n=await this.runCommand(e,r,o);return n===0?{exitCode:n}:{exitCode:n,message:`PHP lifecycle command failed (${e} ${r.join(" ")}). Ensure ${e} is available on PATH, then review composer.json and the command diagnostics above.`}}hasComposer(e){return I.existsSync(P.join(e,"composer.json"))}hasArtisan(e){return I.existsSync(P.join(e,"artisan"))}hasComposerScript(e,r){try{let o=JSON.parse(I.readFileSync(P.join(e,"composer.json"),"utf8"));return !!o.scripts&&Object.prototype.hasOwnProperty.call(o.scripts,r)}catch{return false}}missingManifest(){return {exitCode:1,message:"composer.json was not found. Run the command from a PHP project root."}}unsupported(e){return {exitCode:1,message:`No deterministic PHP ${e} command was detected. Add a "${e}" Composer script or the expected Laravel tooling.`}}async checkPrereqs(){let e=await this.run("php",["--version"],process.cwd());return e.exitCode!==0?e:this.run("composer",["--version"],process.cwd())}async initProject(e){return this.hasComposer(e)?this.run("composer",["install","--no-interaction"],e):this.missingManifest()}async runDev(e){return this.hasComposerScript(e,"dev")?this.run("composer",["run-script","dev"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("dev")}async runTest(e){return this.hasArtisan(e)?this.run("php",["artisan","test"],e):this.hasComposerScript(e,"test")?this.run("composer",["run-script","test"],e):this.unsupported("test")}async runBuild(e){return this.hasComposerScript(e,"build")?this.run("composer",["run-script","build"],e):this.unsupported("build")}async runStart(e){return this.hasComposerScript(e,"start")?this.run("composer",["run-script","start"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("start")}async runLint(e){for(let r of ["lint","analyse","analyze"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return this.unsupported("lint")}async runFormat(e){for(let r of ["format","fmt"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return I.existsSync(P.join(e,"vendor","bin","pint"))||I.existsSync(P.join(e,"pint.json"))?this.run("php",["vendor/bin/pint"],e):this.unsupported("format")}async doctorHints(e){return ["Install a supported PHP release and Composer, then keep both on PATH.","Commit composer.lock for deterministic application installs.","Expose test, lint, format, and build commands as Composer scripts when the framework does not provide them."]}};var qo=class{constructor(e){this.runCommand=e;}runCommand;runtime="rust";async run(e,r){let o=await this.runCommand("cargo",e,r);return o===0?{exitCode:o}:{exitCode:o,message:`Cargo command failed (cargo ${e.join(" ")}). Ensure the stable Rust toolchain and cargo are available on PATH, then review Cargo.toml and the command diagnostics above.`}}hasManifest(e){return I.existsSync(P.join(e,"Cargo.toml"))}missingManifest(){return {exitCode:1,message:"Cargo.toml was not found. Run the command from a Rust project root."}}async checkPrereqs(){return this.run(["--version"],process.cwd())}async initProject(e){return this.hasManifest(e)?this.run(["fetch"],e):this.missingManifest()}async runDev(e){return this.hasManifest(e)?this.run(["run"],e):this.missingManifest()}async runTest(e){return this.hasManifest(e)?this.run(["test","--all-targets"],e):this.missingManifest()}async runBuild(e){return this.hasManifest(e)?this.run(["build","--release"],e):this.missingManifest()}async runStart(e){return this.hasManifest(e)?this.run(["run","--release"],e):this.missingManifest()}async runLint(e){return this.hasManifest(e)?this.run(["clippy","--all-targets","--all-features","--","-D","warnings"],e):this.missingManifest()}async runFormat(e){return this.hasManifest(e)?this.run(["fmt","--all"],e):this.missingManifest()}async doctorHints(e){return ["Install the Rust toolchain with rustup and ensure cargo is on PATH.","Use Cargo.lock for deterministic application builds.","Install rustfmt and clippy components for format and lint lifecycle commands."]}};function _u(){let t={...process.env},e=t.PATH||"";if(e){let r=e.split(P.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(P.delimiter);t.PATH=r;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||i$4(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function Be(t,e){return t==="go"?new Jo((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="node"?new Ko((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="java"?new Vo((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="dotnet"?new Go((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="rust"?new qo((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="php"?new Bo((r,o,n)=>e.runCommandInCwd(r,o,n)):new Uo((r,o)=>e.runCoreRapidkit(r,{cwd:o,env:_u()}))}var Gl=P.join(Kn.homedir(),".workspai","cache"),Jl=1440*60*1e3;function ys(){let t=f$2("CACHE_DIR");if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?P.join(Gl,`vitest-${e}`):Gl}var Yo=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return P.join(ys(),`${this.getCacheKey(e)}.json`)}getTempCachePath(e){let r=`${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;return `${e}.${r}.tmp`}async get(e$1,r="1.0"){let o=this.memoryCache.get(e$1);if(o&&o.version===r&&Date.now()-o.timestamp<Jl)return e.debug(`Cache hit (memory): ${e$1}`),o.data;try{let n=this.getCachePath(e$1),s=await promises.readFile(n,"utf-8"),i=JSON.parse(s);if(i.version===r&&Date.now()-i.timestamp<Jl)return e.debug(`Cache hit (disk): ${e$1}`),this.memoryCache.set(e$1,i),i.data;await promises.unlink(n).catch(()=>{});}catch{e.debug(`Cache miss: ${e$1}`);}return null}async set(e$1,r,o="1.0"){let n={data:r,timestamp:Date.now(),version:o};this.memoryCache.set(e$1,n);try{await promises.mkdir(ys(),{recursive:true});let s=this.getCachePath(e$1),i=this.getTempCachePath(s);await promises.writeFile(i,JSON.stringify(n),"utf-8"),await promises.rename(i,s),e.debug(`Cache set: ${e$1}`);}catch(s){e.debug(`Cache write failed: ${e$1}`,s);}}async invalidate(e$1){this.memoryCache.delete(e$1);try{let r=this.getCachePath(e$1);await promises.unlink(r),e.debug(`Cache invalidated: ${e$1}`);}catch{}}async clear(){this.memoryCache.clear();try{let e$1=ys(),r=await promises.readdir(e$1);await Promise.all(r.map(o=>promises.unlink(P.join(e$1,o)))),e.debug("Cache cleared");}catch{}}};function Vl(t){let e=y(t);return e?`Workspai project found at ${e}, but no Python virtual environment or activation script is available.`:"No Workspai project metadata, Python virtual environment, or activation script was found in this directory or its parents."}function Ae(t,e,r,o,n="process",s){return {id:t,label:e,order:r,layoutHint:n,...o?{parentId:o}:{},...s?{group:s}:{}}}function Nu(t){return t.slice(1).map((e,r)=>{let o=t[r];return {id:`${o.id}->${e.id}`,from:o.id,to:e.id,kind:e.layoutHint==="gate"?"gate":e.layoutHint==="sink"?"handoff":"sequence",order:r+1}})}var $u=[["workspace.intelligence.preflight.sync","Sync","source","DISCOVER"],["workspace.intelligence.stage.model","Model + Graph","process","UNDERSTAND"],["workspace.intelligence.preflight.baseline","Baseline","process","UNDERSTAND"],["workspace.intelligence.stage.diff","Diff","process","UNDERSTAND"],["workspace.intelligence.stage.impact","Impact","process","UNDERSTAND"],["workspace.intelligence.stage.doctor-evidence","Doctor","gate","ASSURE"],["workspace.intelligence.stage.contract-evidence","Contracts","gate","ASSURE"],["workspace.intelligence.stage.analyze-evidence","Analyze","gate","ASSURE"],["workspace.intelligence.stage.readiness-evidence","Readiness","gate","ASSURE"],["workspace.intelligence.stage.verify","Verify","gate","ASSURE"],["workspace.intelligence.stage.context","Context","process","PUBLISH"],["workspace.intelligence.stage.agent-sync","Agent Sync","process","PUBLISH"],["workspace.intelligence.stage.explain","Explain","sink","PUBLISH"]];function Jr(t,e,r){return {id:t,version:3,nodes:[e,...r],edges:Nu(r)}}function Kl(t){let e=t.filter(s=>!s.startsWith("-")&&/^[a-z][a-z0-9-]*$/i.test(s)).slice(0,3),r=e.slice(0,3).join(".")||"cli",o=`command.${r}`,n=Ae(o,e.join(" ")||"Workspai command",0,void 0,"source");if(e[0]==="workspace"&&e[1]==="intelligence"){let s=$u.map(([i,c,p,d],h)=>Ae(i,c,h+1,o,p,d));return Jr(`cli.${r}`,n,s)}return e[0]==="adopt"?Jr(`cli.${r}`,n,[Ae("adopt.resolve","Resolve",1,o,"source","DISCOVER"),Ae("adopt.detect","Detect",2,o,"process","DISCOVER"),Ae("adopt.link","Link",3,o,"process","CONNECT"),Ae("adopt.publish","Seal Intelligence",4,o,"gate","PUBLISH"),Ae("adopt.ground","Agent Entry",5,o,"sink","PUBLISH")]):e[0]==="workspace"&&e[1]==="run"?Jr(`cli.${r}`,n,[Ae("workspace.run.resolve","Resolve Fleet",1,o,"source","DISCOVER"),Ae("workspace.run.gates","Gates",2,o,"gate","ASSURE"),Ae("workspace.run.execute","Execute",3,o,"process","EXECUTE"),Ae("workspace.run.publish","Publish",4,o,"sink","PUBLISH")]):e[0]==="doctor"?Jr(`cli.${r}`,n,[Ae("doctor.observe","Observe",1,o,"source","OBSERVE"),Ae("doctor.diagnose","Diagnose",2,o,"process","DIAGNOSE"),Ae("doctor.plan","Plan",3,o,"process","DECIDE"),Ae("doctor.verify","Verify",4,o,"gate","VERIFY")]):e[0]==="workspace"&&e[1]==="repair"?Jr(`cli.${r}`,n,[Ae("repair.observe","Observe",1,o,"source","OBSERVE"),Ae("repair.plan","Plan",2,o,"process","DECIDE"),Ae("repair.authorize","Authorize",3,o,"gate","AUTHORIZE"),Ae("repair.execute","Execute",4,o,"process","EXECUTE"),Ae("repair.verify","Verify",5,o,"gate","VERIFY")]):{id:`cli.${r}`,version:3,nodes:[n],edges:[]}}var Vr=["list","sync","registry","foundation","intelligence","model","snapshot","diff","impact","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp","policy","contract","share","export","archive","hydrate","import","connect","run","init"],Xo=["intelligence","model","snapshot","diff","impact","contract","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp"];function Hl(t){return Xo.includes(t)}var Ul="workspai-project-entry-capability-v1";var ws="workspai-cli-runtime-command-inventory-v1",Qo=[...w$1,"autopilot","pipeline","import","adopt","goal","change","agent","snapshot","live","bootstrap","setup","cache","mirror","ai","config","product","infra","shell","commands","create","project"],ks=["bootstrap","setup","cache","mirror"],Zo="create",Tu=[...ks,Zo],Mu={bootstrap:"Bootstrap project or workspace dependencies through runtime-aware setup rules.",setup:"Prepare a selected runtime toolchain through the supported adapter boundary.",cache:"Inspect or clear Workspai cache state through the managed cache boundary.",mirror:"Coordinate supported mirror lifecycle operations for the current project.",create:"Create a supported workspace or project through the canonical planner boundary."},en=[["ai","generate-embeddings"],["ai","info"],["ai","recommend"],["ai","update-embeddings"],["agent","bootstrap"],["config","ai"],["config","remove-api-key"],["config","set-api-key"],["config","show"],["change","begin"],["change","list"],["change","predict"],["change","authorize"],["change","resume"],["change","effect"],["change","effect","record"],["change","verification"],["change","verification","record"],["change","status"],["change","explain"],["change","verify"],["change","abort"],["change","capsule"],["change","capsule","validate"],["change","capsule","export"],["infra","down"],["infra","plan"],["infra","status"],["infra","up"],["product","manifest"],["product","manifest","create"],["product","plan"],["project","commands"],["project","agent-entry"],["project","coverage"],["project","workspace"],["project","archives"],["project","archive"],["project","restore"],["project","delete"],["snapshot","create"],["snapshot","inspect"],["snapshot","list"],["snapshot","restore"]];function Wu(t,e,r,o){let n=new Set(t),s=new Set(e),i=t.filter(f=>!s.has(f)).sort(),c=e.filter(f=>!n.has(f)).sort(),p=new Set(r),d=new Set(o),h=r.filter(f=>!d.has(f)).sort(),u=o.filter(f=>!p.has(f)).sort();return {ok:i.length===0&&c.length===0&&h.length===0&&u.length===0,registeredButUndeclared:i,declaredButUnregistered:c,registeredScopedButUndeclared:h,declaredScopedButUnregistered:u}}function Bl(t,e=[]){return t.commands.flatMap(r=>{let o=r.name(),n=[...e,o];return [{path:n,command:o,parent:e.length>0?e.join(" "):null,registrationKind:"commander",aliases:r.aliases?.()??[],description:r.description?.()??"",hidden:r._hidden===true,arguments:(r.registeredArguments??[]).map(i=>({name:i.name(),required:i.required,variadic:i.variadic})),options:(r.options??[]).map(i=>({flags:i.flags,attributeName:i.attributeName?.()??null}))},...Bl(r,n)]})}function ql(t){let e=Bl(t),r=e.filter(c=>c.path.length===1).map(c=>c.command),o=new Set(r),n=Tu.filter(c=>!o.has(c)).map(c=>({path:[c],command:c,parent:null,registrationKind:"manual-handler",aliases:[],description:Mu[c],hidden:false,arguments:[],options:[]})),s=[...e,...n].sort((c,p)=>c.path.join(" ").localeCompare(p.path.join(" "))),i=[...new Set(s.filter(c=>c.path.length===1).map(c=>c.command))].sort();return {schemaVersion:ws,commands:s,topLevelCommands:i,integrity:Wu(i,Qo,e.filter(c=>c.path.length>1).map(c=>c.path.join(" ")),en.map(c=>c.join(" ")))}}function zl(t){return `CLI command surface integrity violation (${[t.registeredButUndeclared.length>0?`registered but undeclared: ${t.registeredButUndeclared.join(", ")}`:null,t.declaredButUnregistered.length>0?`declared but unreachable: ${t.declaredButUnregistered.join(", ")}`:null,t.registeredScopedButUndeclared.length>0?`registered scoped but undeclared: ${t.registeredScopedButUndeclared.join(", ")}`:null,t.declaredScopedButUnregistered.length>0?`declared scoped but unreachable: ${t.declaredScopedButUnregistered.join(", ")}`:null].filter(r=>r!==null).join("; ")})`}var Du={"--workspace":"Use an explicit workspace root instead of the nearest workspace.","--json":"Emit machine-readable JSON.","--strict":"Return a non-zero exit when governed evidence blocks the result.","--for-agent":"Build output for an agent surface (for example codex, copilot, or cursor).","--include-paths":"Include absolute filesystem paths.","--include-evidence":"Read and include referenced evidence metadata.","--scan-depth":"Set the bounded observable-project discovery depth.","--cache":"Reuse the model cache when the structural inputs are unchanged.","--refresh-graph":"Bypass the compatible persisted graph and rebuild from live sources.","--incremental":"Reuse unchanged projects and rebuild affected graph relations.","--write":"Persist the command artifact under .workspai/reports.","--scope":"Limit the operation to a bounded scope such as project:<name>.","--kind":"Limit graph entity search to one canonical entity kind.","--dry-run":"Preview the operation without applying writes.","--preset":"Select the generated agent customization preset.","--refresh-context":"Rebuild agent context before synchronization.","--refresh":"Refresh the underlying registry or context before reading it.","--agent-sync":"Synchronize agent grounding after writing the context artifact.","--no-agent-sync":"Do not synchronize agent grounding after writing context.","--target":"Select one or more agent customization targets.","--experimental-hooks":"Generate advisory VS Code agent hook design files.","--hydrate-prompts":"Add workspace-specific verification steps to supported prompts.","--project-grounding":"Select the project entrypoint policy: managed, local, or off.","--ci":"Produce a CI-oriented command plan.","--from":"Read the specified baseline, report, or graph artifact.","--from-impact":"Read the specified impact report for verification.","--output":"Write the requested export or report to this path.","--limit":"Bound graph query results (1\u2013100).","--once":"Build the initial observed state and exit.","--graph-stream":"Emit graph snapshot/delta events as NDJSON.","--force":"Replace an existing generated target where supported.","--no-doctor":"Exclude Doctor evidence from a share bundle.","--no-blueprint":"Exclude the reproducibility blueprint from a share bundle.","--include-env":"Include private environment files in an export archive.","--archive-compression":"Select the archive compression format.","--max-download-size":"Bound a remote archive download.","--max-expanded-size":"Bound the expanded archive size.","--download-timeout-ms":"Bound remote archive download time.","--allow-private-network":"Allow private-network archive sources explicitly.","--affected":"Run only projects affected by the selected Git change.","--blast-radius":"Include transitive downstream dependents.","--since":"Select the Git baseline used for affected-project discovery.","--parallel":"Run selected projects concurrently.","--plan":"Resolve lifecycle commands without executing project code.","--runtime":"Limit lifecycle planning or execution to one detected runtime family.","--max-workers":"Bound concurrent project workers.","--continue-on-error":"Continue remaining projects after a project failure.","--reuse-passed":"Reuse successful project-stage results where safe.","--no-gates":"Skip Doctor and Readiness pre-run gates.","--allow-breaking":"Allow a verified goal to use breaking dependency changes.","--allow-force":"Allow a verified goal to use force-based repair commands.","--card":"Select the dashboard card whose governed remediation actions should be repaired.","--action-id":"Select one exact governed remediation action.","--project":"Limit the repair transaction to one registered project name.","--proposal":"Read a bounded model repair proposal from a JSON file inside the workspace.","--transaction":"Select one durable repair transaction by id.","--approved-by":"Record the local actor approving the immutable repair plan.","--decision":"Submit one of the exact options exposed by a decision-required transaction.","--max-risk":"Set the maximum approved repair risk: safe, guarded, or invasive.","--no-auto-rollback":"Require a decision instead of automatically restoring a failed transaction.","--no-build":"Do not require build validation for the selected verified goal.","--no-tests":"Do not require test validation for the selected verified goal.","--no-run":"Read current goal evidence without executing verification commands.","--reuse-intelligence":"Reuse a just-completed canonical intelligence run while executing goal-specific checks."},Kr={list:{usage:"workspai workspace list [--json]",summary:"List registered Workspai workspaces.",flags:["--json"],examples:["workspai workspace list","workspai workspace list --json"]},intelligence:{usage:"workspai workspace intelligence run [--for-agent <agent>] [--strict] [--json]",summary:"Run the canonical Workspace Intelligence chain in contract order.",flags:["--workspace","--json","--strict","--for-agent"],subactions:["run"],artifact:p.intelligenceRun,examples:["workspai workspace intelligence run --strict","workspai workspace intelligence run --for-agent codex --json"]},model:{usage:"workspai workspace model [--cache|--incremental] [--write] [--strict] [--json]",summary:"Build the canonical workspace model from registered and observed sources.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth","--cache","--incremental","--write","--strict"],artifact:p.model,examples:["workspai workspace model --write --json","workspai workspace model --incremental --write --json"]},"agent-sync":{usage:"workspai workspace agent-sync [--for-agent <agent>] [--target <targets>] [--project-grounding <mode>] [--write]",summary:"Synchronize bounded workspace grounding for supported agent surfaces.",flags:["--workspace","--json","--scope","--for-agent","--write","--dry-run","--strict","--preset","--refresh-context","--refresh","--target","--experimental-hooks","--hydrate-prompts","--project-grounding"],artifact:p.agentCustomizationPack,examples:["workspai workspace agent-sync --target all --write --strict","workspai workspace agent-sync --for-agent copilot --dry-run --json"]},"remediation-plan":{usage:"workspai workspace remediation-plan [--ci] [--write] [--json]",summary:"Build a governed repair plan from current workspace evidence.",flags:["--workspace","--json","--include-paths","--ci","--write"],artifact:t.artifactRemediationPlan,examples:["workspai workspace remediation-plan --write --json","workspai workspace remediation-plan --ci --json"]},repair:{usage:"workspai workspace repair <capabilities|plan|propose|approve|decide|execute|resume|status|list|rollback|cancel> [--transaction <id>] [--json]",summary:"Run a durable, approval-bound repair transaction through checkpoint, validation, canonical verification, and rollback.",flags:["--workspace","--json","--card","--action-id","--project","--proposal","--transaction","--approved-by","--decision","--max-risk","--allow-breaking","--allow-force","--no-auto-rollback"],subactions:["capabilities","plan","propose","approve","decide","execute","resume","status","list","rollback","cancel"],artifact:p.repairTransaction,examples:["workspai workspace repair capabilities --json","workspai workspace repair plan --card doctor --project api --json","workspai workspace repair propose --proposal .workspai/repair/inbox/proposal.json --json","workspai workspace repair approve --transaction repair_123 --approved-by local-user --json","workspai workspace repair decide --transaction repair_123 --decision approve-invasive --json","workspai workspace repair execute --transaction repair_123 --json","workspai workspace repair rollback --transaction repair_123 --json"]},context:{usage:"workspai workspace context [--for-agent <agent>] [--scope <scope>] [--write] [--json]",summary:"Build a bounded, evidence-backed context pack for people and agents.",flags:["--workspace","--json","--for-agent","--scope","--include-evidence","--scan-depth","--write","--agent-sync","--no-agent-sync","--preset","--target","--strict","--project-grounding"],artifact:p.agentContext,examples:["workspai workspace context --for-agent codex --write --json","workspai workspace context --scope project:api --json"]},snapshot:{usage:"workspai workspace snapshot [--json]",summary:"Persist the current model as the comparison baseline.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth"],artifact:p.snapshot,examples:["workspai workspace snapshot --json"]},diff:{usage:"workspai workspace diff --from <snapshot-or-model|git[:ref]> [--strict] [--json]",summary:"Compare the current model with a trusted model baseline.",flags:["--workspace","--json","--from","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.diff,examples:["workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","workspai workspace diff --from git --json"]},impact:{usage:"workspai workspace impact --from <diff> [--scope <scope>] [--strict] [--json]",summary:"Calculate the evidence-backed blast radius of the current model change.",flags:["--workspace","--json","--from","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.impact,examples:["workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json","workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --strict --json"]},verify:{usage:"workspai workspace verify [--from-impact <impact-report>] [--scope <scope>] [--strict] [--json]",summary:"Verify the selected change against contracts, gates, and current evidence.",flags:["--workspace","--json","--from-impact","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.verify,examples:["workspai workspace verify --strict --json","workspai workspace verify --from-impact .workspai/reports/workspace-impact-last-run.json --json"]},goal:{usage:"workspai workspace goal <plan|status|verify> <kind|goal-id> [--scope <scope>] [--target <percent>] [--json]",summary:"Plan, resume, and evidence-verify a durable engineering goal for people and agents.",flags:["--workspace","--json","--scope","--target","--allow-breaking","--allow-force","--no-build","--no-tests","--no-run","--reuse-intelligence"],flagDescriptions:{"--target":"Set the required test coverage percentage (0\u2013100)."},subactions:["plan","status","verify"],artifact:p.verifiedGoalStatus,examples:["workspai workspace goal plan release-readiness --json","workspai workspace goal plan dependency-security --scope project:api --json","workspai workspace goal plan test-coverage --scope project:web --target 75 --json","workspai workspace goal verify <goal-id> --json"]},graph:{usage:"workspai workspace graph [mode] [query|from] [to] [--json]",summary:"Build, query, prove, compare, or export the workspace graph.",flags:["--workspace","--json","--output","--from","--limit","--kind","--refresh-graph","--include-paths","--include-evidence","--scan-depth","--scope","--write"],subactions:["emit","explain","entities","search","evidence","path","overlay","benchmark","benchmark-suite","dot","mermaid","jsonld","graphml","gexf"],examples:['workspai workspace graph search "authentication endpoint" --kind endpoint --limit 12 --json','workspai workspace graph evidence "GET /users" --json',"workspai workspace graph benchmark-suite agent-core.v1 --write --json","workspai workspace graph mermaid"]},watch:{usage:"workspai workspace watch [--once] [--graph-stream] [--json]",summary:"Observe model changes and optionally stream graph deltas.",flags:["--workspace","--json","--once","--graph-stream","--scan-depth"],examples:["workspai workspace watch --once --json","workspai workspace watch --graph-stream"]},sync:{usage:"workspai workspace sync [--project-grounding <mode>] [--json]",summary:"Synchronize canonical workspace registration and project metadata.",flags:["--workspace","--json","--project-grounding"],examples:["workspai workspace sync --json"]},registry:{usage:"workspai workspace registry [--refresh] [--json]",summary:"Inspect the canonical workspace registry summary.",flags:["--workspace","--json","--refresh"],examples:["workspai workspace registry --refresh --json"]},foundation:{usage:"workspai workspace foundation [--force] [--json]",summary:"Create or repair the standard workspace foundation files.",flags:["--workspace","--json","--force"],examples:["workspai workspace foundation --json"]},policy:{usage:"workspai workspace policy [show|status|get|set] [key] [value] [--json]",summary:"Inspect or update workspace governance policy.",flags:["--workspace","--json"],subactions:["show","status","get","set"],examples:["workspai workspace policy get --json"]},contract:{usage:"workspai workspace contract [init|inspect|sync|verify|graph] [--strict] [--json]",summary:"Create, inspect, synchronize, verify, or project the workspace contract.",flags:["--workspace","--json","--output","--force","--strict"],subactions:["init","inspect","sync","verify","graph"],artifact:t.workspaceContract,examples:["workspai workspace contract sync --strict --json","workspai workspace contract verify --strict --json","workspai workspace contract graph --json"]},share:{usage:"workspai workspace share [--output <file>] [--json]",summary:"Create a bounded, shareable workspace evidence bundle.",flags:["--workspace","--json","--output","--include-paths","--no-doctor","--no-blueprint"],examples:["workspai workspace share --output workspace-share.json --json"]},export:{usage:"workspai workspace export [--output <archive>] [--archive-compression <format>]",summary:"Export a portable workspace archive.",flags:["--workspace","--json","--output","--include-env","--archive-compression"],examples:["workspai workspace export --output workspace.tar.gz"]},archive:{usage:"workspai workspace archive <inspect|verify|doctor> <source> [safety options] [--json]",summary:"Inspect, verify, or diagnose a portable workspace archive without materializing it.",flags:["--json","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],subactions:["inspect","verify","doctor"],examples:["workspai workspace archive inspect ./workspace.tar.gz --json","workspai workspace archive verify ./workspace.tar.gz --strict --json","workspai workspace archive doctor ./workspace.tar.gz --json"]},hydrate:{usage:"workspai workspace hydrate <source> [--output <directory>] [--dry-run] [--json]",summary:"Hydrate a portable workspace into a controlled destination.",flags:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace hydrate workspace.tar.gz --output ./restored --dry-run --json"]},import:{usage:"workspai workspace import <source> [--output <directory>] [--dry-run] [--json]",summary:"Verify, materialize, register, relink, and reconcile a portable workspace archive safely.",flags:["--json","--output","--dry-run","--strict","--project-grounding","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace import workspace.tar.gz --output ./imported --json"]},connect:{usage:"workspai workspace connect [directory] [--project-grounding <mode>] [--dry-run] [--json]",summary:"Register and reconcile an existing Workspai workspace in place without moving its source.",flags:["--json","--dry-run","--project-grounding"],examples:["workspai workspace connect /path/to/existing-workspace --json"]},run:{usage:"workspai workspace run <stage> [selection and concurrency options] [--json]",summary:"Run a lifecycle stage across selected workspace projects.",flags:["--workspace","--json","--scope","--plan","--runtime","--affected","--blast-radius","--since","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],subactions:["init","test","build","start","<custom-from-context>"],artifact:t.workspaceRunLast,examples:["workspai workspace run test --scope project:api --plan --runtime ruby --json","workspai workspace run test --affected --blast-radius --strict","workspai workspace run build --parallel --max-workers 4 --json"]},explain:{usage:"workspai workspace explain [target] [--scope <scope>] [--write] [--json]",summary:"Explain current blockers or a selected workspace target from evidence.",flags:["--workspace","--json","--scope","--write"],artifact:p.explain,examples:["workspai workspace explain --write --json"]},why:{usage:"workspai workspace why [target] [--scope <scope>] [--write] [--json]",summary:"Alias the evidence-backed workspace explanation flow.",flags:["--workspace","--json","--scope","--write"],artifact:d$5,examples:["workspai workspace why readiness --json"]},trace:{usage:"workspai workspace trace --from <diff-artifact> [--write] [--json]",summary:"Trace a model change through blast radius and decision gates.",flags:["--workspace","--json","--from","--write"],artifact:e$2,examples:["workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --write --json"]},feedback:{usage:"echo '<event-json>' | workspai workspace feedback record --json",summary:"Record a structured outcome event for the workspace intelligence history.",flags:["--workspace","--json"],subactions:["record"],examples:[`echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | workspai workspace feedback record --json`]},eval:{usage:"workspai workspace eval [init|record|status|report|compare] [arguments] [--json]",summary:"Measure agent/model calls, tool use, tokens, latency, and verified outcome.",flags:["--workspace","--json","--from","--output"],subactions:["init","record","status","report","compare"],artifact:p.evaluationLastRun,examples:["workspai workspace eval init repair-readiness workspace-intelligence --json","workspai workspace eval report --output ./evaluation.json --json"]},mcp:{usage:"workspai workspace mcp serve",summary:"Serve bounded, read-mostly workspace evidence over stdio MCP.",flags:["--workspace","--json"],subactions:["serve"],examples:["workspai workspace mcp serve"]},init:{usage:"workspai workspace init [selection and concurrency options] [--json]",summary:"Initialize all selected projects through the workspace fleet runner.",flags:["--workspace","--json","--scope","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],artifact:t.workspaceRunLast,examples:["workspai workspace init --parallel --strict"]}};function vs(t){if(t)return Kr[t]}function Yl(t){return t[0]==="workspace"&&!!vs(t[1])&&t.slice(2).some(e=>e==="--help"||e==="-h")}function Xl(t,e){let r=vs(e)?.flagDescriptions?.[t]??Du[t];if(!r)throw new Error(`Workspace action flag has no description: ${t}`);return r}function Ql(t){let e=vs(t);if(!e)throw new Error(`Unknown workspace action: ${t}`);let r=[`Workspai workspace ${t}`,"",e.summary,"","Usage:",` ${e.usage}`];if(e.subactions&&e.subactions.length>0&&r.push("","Modes:",` ${e.subactions.join(" | ")}`),e.flags.length>0){r.push("","Options:");for(let o of e.flags){let n=Xl(o,t);r.push(` ${o.padEnd(24)} ${n}`.trimEnd());}}return e.artifact&&r.push("","Evidence:",` ${e.artifact}`),r.push("","Examples:",...e.examples.map(o=>` ${o}`),""),r.join(`
150
150
  `)}var Zl="rapidkit-runtime-command-surface-v1";var Ps=s.doctorRemediationPlan.schemaVersion;var ep="workspai-workspace-intelligence-architecture-v1";var tp={autopilotRelease:s.autopilotReleaseLastRun.schemaVersion,workspaceList:"rapidkit-workspace-list-v1",workspaceSync:"rapidkit-workspace-sync-v1",compatibilityMatrix:s.compatibilityMatrix.schemaVersion,mcpDesign:s.workspaiMcpDesign.schemaVersion,agentHooks:s.agentHooks.schemaVersion,projectArchive:"rapidkit-project-archive-v1",workspaceSnapshot:"rapidkit-workspace-snapshot-v1",workspaceSnapshotV2:"rapidkit-workspace-snapshot-v2",infraPlan:s.infraPlan.schemaVersion,privateProductManifest:"rapidkit.private-product-manifest.v1",productFactoryPlan:"rapidkit.product-factory-plan.v1",workspaceModelCache:s.workspaceModelCache.schemaVersion,workspaceWatchEvent:"workspace-watch-event.v1",doctorProjectScan:"doctor-project-scan-v2",doctorWorkspaceCache:s.doctorWorkspaceCache.schemaVersion};var rp="project-workspace-resolution.v1";function op(t){a$5(t,"contracts/project-workspace-resolution.v1.json","Project workspace resolution");}var bs="workspai.ingestion-plan.v1",tn="workspai.ingestion-result.v1",rn="workspai.adopt-effects.v1";var np="contracts/ingestion-result.v1.json";function Gt(t){return {schemaVersion:bs,...t}}var Lu="workspai-published-contract-catalog-v1",Fu="workspace-graph-stream.v1";function Hr(){return {workspaceContract:1,runtimeCommandSurface:Zl,cliRuntimeCommandInventory:ws,cliOperationResult:a$K,publishedContractCatalog:Lu,workspaceArchiveCapabilities:a$J,workspaceArchiveManifest:b$k,workspaceArchiveOperationResult:c$3,ingestionPlan:bs,ingestionResult:tn,adoptEffects:rn,projectEntryCapability:Ul,projectWorkspaceLink:s.projectWorkspaceLink.schemaVersion,projectWorkspaceResolution:rp,projectContextAgent:s.projectContextAgent.schemaVersion,projectKnowledgeGraphReference:s.projectKnowledgeGraphReference.schemaVersion,projectAgentEntry:a$I,agentBootstrapReceipt:c$f,doctorProjectEvidence:b$j,doctorWorkspaceEvidence:a$H,doctorGraphDiagnosis:b$i,doctorDiagnosis:a$G,doctorCapabilities:a$F,doctorValidation:c$e,doctorReceipt:s.doctorReceipt.schemaVersion,doctorSummary:c$d,projectTestCoverage:s.projectTestCoverage.schemaVersion,verifiedGoal:"workspai.verified-goal.v1",verifiedGoalStatus:q.verifiedGoalStatus,goalPack:a$E,goalAgentHandoff:b$h,goalPlanResult:c$c,goalIndex:e$b,goalLifecycleResult:g$8,decisionEvent:f$4,decisionTransaction:e$a,decisionCheckpoint:g$7,changeOperationResult:l$3,architectureChangeLease:h$4,predictedArchitectureChange:i$2,architectureSurpriseReport:j$7,proofCarryingChangeCapsule:k$5,proofCarryingChangeList:m$4,proofCarryingChangeCapsuleValidation:n$4,proofCarryingChangeCapsuleExport:o$3,workspaceIntelligenceArchitecture:ep,workspaceIntelligenceChain:a$D,workspaceIntelligenceArtifacts:q,cliLogEvent:a$C,workspaceActivityEvent:a$B,workspaceActivityMonitorSnapshot:a$A,workspaceActivityMonitorFleet:b$g,workspaceActivityBoard:h$3,freshnessMetadata:c$b,factFreshness:e$9,blockerResolution:a$z,workspaceModel:k$4,workspaceImpact:f$3,workspaceVerify:c$a,workspaceContext:a$y,workspaceDependencyGraph:e$8,workspaceKnowledgeGraph:a$x,workspaceGraphStream:Fu,workspaceKnowledgeGraphChangeOverlay:a$w,workspaceKnowledgeSearch:a$v,workspaceGraphTokenEfficiency:a$u,workspaceIntelligenceBenchmark:a$t,modelUsageEvent:a$s,workspaceIntelligenceEvaluation:b$f,workspaceIntelligenceEvaluationComparison:c$9,workspaceIntelligenceHistory:a$r,agentCustomizationPackCapabilities:c$8,agentCustomizationPackReport:q.agentCustomizationPack,agentReportsIndex:q.agentIndex,workspaceOperationalSkill:a$q,workspaceSkillsIndex:b$e,workspaceExplain:a$p,agentActionOutcome:a$o,doctorRemediationPlan:Ps,doctorDependencyRepairTransaction:"workspai.doctor-dependency-repair-transaction.v1",artifactRemediationPlan:a$n,studioCardRepairCapabilities:j$6,workspaceRepairProposal:e$7,workspaceRepairCapabilities:g$6,workspaceRepairTransaction:a$m,doctorFixResult:a$l,backendImportStackParitySnapshot:"backend-import-stack-parity-v1",bootstrapCompliance:s.bootstrapCompliance.schemaVersion,commandCapabilities:"rapidkit-command-capabilities-v1",createPlannerCapabilities:"rapidkit-create-planner-capabilities-v1",doctorRemediationPlanLegacy:Ps,extensionCliCompatibility:"rapidkit-extension-cli-compatibility.v1",infraStack:"rapidkit.infra-stack.v1",mirrorOps:s.mirrorOps.schemaVersion,moduleLayout:"rapidkit.module-layout.v1",moduleSupport:"rapidkit-module-support-v1",pipelineLastRun:s.pipelineLastRun.schemaVersion,transparencyEvidence:s.transparencyEvidence.schemaVersion,version:"rapidkit-version-v1",studioBlockerHandoff:"rapidkit-studio-blocker-handoff-v1",workspaceRegistry:s.workspaceRegistry.schemaVersion,workspaceRunLast:s.workspaceRunLast.schemaVersion,workspaceShareBundle:s.workspaceShareBundle.schemaVersion,...tp}}function on(){let t=Hr(),e={workspaceContract:"contracts/workspace-contract.v1.json",runtimeCommandSurface:"contracts/runtime-command-surface.v1.json",cliRuntimeCommandInventory:"contracts/cli-runtime-command-inventory.v1.snapshot.json",cliOperationResult:"contracts/cli-operation-result.v1.json",publishedContractCatalog:"contracts/published-contract-catalog.v1.json",workspaceArchiveCapabilities:"contracts/workspace-archive-capabilities.v1.json",workspaceArchiveManifest:"contracts/workspace-archive-manifest.v1.json",workspaceArchiveOperationResult:"contracts/workspace-archive-operation-result.v1.json",ingestionPlan:"contracts/ingestion-plan.v1.json",ingestionResult:"contracts/ingestion-result.v1.json",adoptEffects:"contracts/adopt-effects.v1.json",projectEntryCapability:"contracts/project-entry-capability.v1.json",projectWorkspaceLink:"contracts/project-workspace-link.v1.json",projectWorkspaceResolution:"contracts/project-workspace-resolution.v1.json",projectContextAgent:"contracts/workspace-intelligence/project-context-agent.v1.json",projectKnowledgeGraphReference:"contracts/workspace-intelligence/project-knowledge-graph-reference.v1.json",projectAgentEntry:"contracts/workspace-intelligence/project-agent-entry.v1.json",agentBootstrapReceipt:"contracts/workspace-intelligence/agent-bootstrap-receipt.v1.json",doctorProjectEvidence:"contracts/doctor-project-evidence.v1.json",doctorWorkspaceEvidence:"contracts/doctor-workspace-evidence.v1.json",doctorGraphDiagnosis:"contracts/workspace-intelligence/doctor-graph-diagnosis.v1.json",doctorDiagnosis:"contracts/workspace-intelligence/doctor-diagnosis.v1.json",doctorCapabilities:"contracts/workspace-intelligence/doctor-capabilities.v1.json",doctorValidation:"contracts/workspace-intelligence/doctor-validation.v1.json",doctorReceipt:"contracts/workspace-intelligence/doctor-receipt.v1.json",doctorSummary:"contracts/workspace-intelligence/doctor-summary.v1.json",projectTestCoverage:"contracts/project-test-coverage.v1.json",verifiedGoal:"contracts/workspace-intelligence/verified-goal.v1.json",verifiedGoalStatus:"contracts/workspace-intelligence/verified-goal-status.v1.json",goalPack:"contracts/workspace-intelligence/goal-pack.v1.json",goalAgentHandoff:"contracts/workspace-intelligence/goal-agent-handoff.v1.json",goalPlanResult:"contracts/workspace-intelligence/goal-plan-result.v1.json",goalIndex:"contracts/workspace-intelligence/goal-index.v1.json",goalLifecycleResult:"contracts/workspace-intelligence/goal-lifecycle-result.v1.json",decisionEvent:"contracts/workspace-intelligence/decision-event.v1.json",decisionTransaction:"contracts/workspace-intelligence/decision-transaction.v1.json",decisionCheckpoint:"contracts/workspace-intelligence/decision-checkpoint.v1.json",changeOperationResult:"contracts/workspace-intelligence/change-operation-result.v1.json",architectureChangeLease:"contracts/workspace-intelligence/architecture-change-lease.v1.json",predictedArchitectureChange:"contracts/workspace-intelligence/predicted-architecture-change.v1.json",architectureSurpriseReport:"contracts/workspace-intelligence/architecture-surprise-report.v1.json",proofCarryingChangeCapsule:"contracts/workspace-intelligence/proof-carrying-change-capsule.v1.json",proofCarryingChangeList:"contracts/workspace-intelligence/proof-carrying-change-list.v1.json",proofCarryingChangeCapsuleValidation:"contracts/workspace-intelligence/proof-carrying-change-capsule-validation.v1.json",proofCarryingChangeCapsuleExport:"contracts/workspace-intelligence/proof-carrying-change-capsule-export.v1.json",workspaceIntelligenceArchitecture:"contracts/workspace-intelligence-architecture.v1.json",workspaceIntelligenceChain:"contracts/workspace-intelligence-chain.v1.json",workspaceIntelligenceArtifacts:null,cliLogEvent:"contracts/cli-log-event.v1.json",workspaceActivityEvent:"contracts/workspace-activity-event.v1.json",workspaceActivityMonitorSnapshot:"contracts/workspace-activity-monitor-snapshot.v1.json",workspaceActivityMonitorFleet:"contracts/workspace-activity-monitor-fleet.v1.json",workspaceActivityBoard:"contracts/workspace-activity-board.v1.json",freshnessMetadata:null,factFreshness:"contracts/workspace-intelligence/fact-freshness.v1.json",blockerResolution:"contracts/workspace-intelligence/blocker-resolution.v1.json",workspaceModel:"contracts/workspace-intelligence/workspace-model.v1.json",workspaceImpact:"contracts/workspace-intelligence/workspace-impact.v1.json",workspaceVerify:"contracts/workspace-intelligence/workspace-verify.v1.json",workspaceContext:"contracts/workspace-intelligence/workspace-context.v1.json",workspaceDependencyGraph:"contracts/workspace-intelligence/workspace-dependency-graph.v1.json",workspaceKnowledgeGraph:"contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",workspaceGraphStream:"contracts/workspace-intelligence/workspace-graph-stream.v1.json",workspaceKnowledgeGraphChangeOverlay:"contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",workspaceKnowledgeSearch:"contracts/workspace-intelligence/workspace-knowledge-search.v1.json",workspaceGraphTokenEfficiency:"contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",workspaceIntelligenceBenchmark:"contracts/workspace-intelligence/workspace-intelligence-benchmark.v1.json",modelUsageEvent:"contracts/workspace-intelligence/model-usage-event.v1.json",workspaceIntelligenceEvaluation:"contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",workspaceIntelligenceEvaluationComparison:"contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json",workspaceIntelligenceHistory:"contracts/workspace-intelligence/workspace-intelligence-history.v1.json",agentCustomizationPackCapabilities:"contracts/agent-customization-pack.v1.json",agentCustomizationPackReport:"contracts/workspace-intelligence/agent-customization-pack-report.v1.json",agentReportsIndex:"contracts/workspace-intelligence/agent-reports-index.v1.json",workspaceOperationalSkill:"contracts/workspace-intelligence/workspace-operational-skill.v1.json",workspaceSkillsIndex:"contracts/workspace-intelligence/workspace-skills-index.v1.json",workspaceExplain:"contracts/workspace-intelligence/workspace-explain.v1.json",agentActionOutcome:"contracts/workspace-intelligence/agent-action-outcome.v1.json",doctorRemediationPlan:"contracts/doctor-remediation-plan.v2.json",doctorDependencyRepairTransaction:"contracts/workspace-intelligence/doctor-dependency-repair-transaction.v1.json",artifactRemediationPlan:"contracts/artifact-remediation-plan.v1.json",studioCardRepairCapabilities:"contracts/studio-card-repair-capabilities.v1.json",workspaceRepairProposal:"contracts/workspace-intelligence/workspace-repair-proposal.v1.json",workspaceRepairCapabilities:"contracts/workspace-repair-capabilities.v1.json",workspaceRepairTransaction:"contracts/workspace-intelligence/workspace-repair-transaction.v1.json",doctorFixResult:"contracts/workspace-intelligence/doctor-fix-result.v1.json",backendImportStackParitySnapshot:"contracts/backend-import-stack-parity.snapshot.json",bootstrapCompliance:"contracts/bootstrap-compliance.v1.json",commandCapabilities:"contracts/command-capabilities.v1.json",createPlannerCapabilities:"contracts/create-planner-capabilities.v1.json",doctorRemediationPlanLegacy:"contracts/doctor-remediation-plan.v1.json",extensionCliCompatibility:"contracts/extension-cli-compatibility.v1.json",infraStack:"contracts/infra-stack.v1.json",mirrorOps:"contracts/mirror-ops.v1.json",moduleLayout:"contracts/module-layout.v1.json",moduleSupport:"contracts/module-support.v1.json",pipelineLastRun:"contracts/pipeline-last-run.v1.json",transparencyEvidence:"contracts/transparency-evidence.v1.json",version:"contracts/version.v1.json",studioBlockerHandoff:"contracts/workspace-intelligence/studio-blocker-handoff.v1.json",workspaceRegistry:"contracts/workspace-registry.v1.json",workspaceRunLast:"contracts/workspace-run-last.v1.json",workspaceShareBundle:"contracts/workspace-share-bundle.v1.json",autopilotRelease:"contracts/autopilot-release.v1.json",workspaceList:"contracts/workspace-list.v1.json",workspaceSync:"contracts/workspace-sync.v1.json",compatibilityMatrix:"contracts/compatibility-matrix.v1.json",mcpDesign:"contracts/workspace-intelligence/mcp-design.v1.json",agentHooks:"contracts/workspace-intelligence/agent-hooks.v1.json",projectArchive:"contracts/project-archive.v1.json",workspaceSnapshot:"contracts/workspace-snapshot.v1.json",workspaceSnapshotV2:"contracts/workspace-snapshot.v2.json",infraPlan:"contracts/infra-plan.v1.json",privateProductManifest:"contracts/private-product-manifest.v1.json",productFactoryPlan:"contracts/product-factory-plan.v1.json",workspaceModelCache:"contracts/workspace-model-cache.v1.json",workspaceWatchEvent:"contracts/workspace-watch-event.v1.json",doctorProjectScan:"contracts/doctor-project-scan.v2.json",doctorWorkspaceCache:"contracts/doctor-workspace-cache.v2.json"};return Object.fromEntries(Object.entries(t).map(([r,o])=>{let n=e[r];return [r,{schemaVersion:o,contractPath:n,publication:n?r==="runtimeCommandSurface"||r==="cliRuntimeCommandInventory"||r.endsWith("Capabilities")||r.endsWith("Snapshot")||r==="extensionCliCompatibility"||r==="moduleLayout"||r==="moduleSupport"?"capability-contract":"json-schema":"embedded-type",...r==="workspaceIntelligenceArtifacts"?{artifacts:Object.fromEntries(Object.keys(p).map(s=>[s,{path:p[s],schemaVersion:q[s],contractPath:r$2[s]}]))}:{}}]}))}var js="rapidkit-command-capabilities-v1",sp="rapidkit-version-v1";var Gu=["catalog","pulse","nova","orbit","atlas","vertex","summit","beacon","ledger","flux","nexus","apex","harbor","forge","spark","portal","studio","canvas","quantum","vault","zenith","compass","vector","catalyst","saas","commerce","radar","stellar","prism","cedar","momentum","signal","cipher","lumen","trail","ridge"],Ju={"fastapi.standard":"api","fastapi.ddd":"api","nestjs.standard":"api","springboot.standard":"service","gofiber.standard":"api","gogin.standard":"api","dotnet.webapi.clean":"api"},Vu={nextjs:"web",remix:"app","vite-react":"web","vite-vue":"web","vite-svelte":"web","vite-solid":"web","vite-vanilla":"app",nuxt:"app",angular:"app",astro:"site",sveltekit:"app"},Ku={tauri:"desktop",electron:"desktop","vscode-extension":"extension",laravel:"api"};function Hu(t){return t[Math.floor(Math.random()*t.length)]}function Cs(t){let e=Hu(Gu),r=l$5(t);if(r){let i=Vu[r.id]??"app";return `${e}-${i}`}let o=r$4(t);if(o)return `${e}-${Ku[o.id]??"app"}`;let n=a$4(t),s=n?Ju[n.id]??"service":"app";return `${e}-${s}`}async function zu(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function Yu(t){if(!await M.pathExists(t))return [];let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(o)for(let n of await promises.readdir(o,{withFileTypes:true})){let s=P.join(o,n.name);n.isFile()?e.push(s):n.isDirectory()&&r.push(s);}}return e}async function ip(t,e){await M.outputFile(t,`${JSON.stringify(e,null,2)}
151
151
  `,"utf-8");}function pt(t,e){return P.isAbsolute(e)?e:P.join(t,e)}function Xu(t,e){if(!e.trim()||P.isAbsolute(e)||/^[a-zA-Z]:[\\/]/.test(e))throw new Error(`Mirror artifact target must be a non-empty relative path: ${e}`);let r=P.resolve(t),o=P.resolve(r,e),n=P.relative(r,o);if(!n||n.startsWith("..")||P.isAbsolute(n))throw new Error(`Mirror artifact target escapes the managed artifact directory: ${e}`);return o}async function cp(t,e){let r=P.relative(t,e),o=t;for(let s of r.split(P.sep).slice(0,-1)){o=P.join(o,s);let i=await promises.lstat(o).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)break;if(i.isSymbolicLink())throw new Error(`Mirror artifact target traverses a symbolic link: ${o}`);if(!i.isDirectory())throw new Error(`Mirror artifact target parent is not a directory: ${o}`)}let n=await promises.lstat(e).catch(s=>{if(s.code==="ENOENT")return null;throw s});if(n?.isSymbolicLink()||n&&!n.isFile())throw new Error(`Mirror artifact target must be absent or a regular file: ${e}`)}async function Qu(t,e){let r=P.resolve(t),o=P.relative(r,P.resolve(e));if(!o||o.startsWith("..")||P.isAbsolute(o))throw new Error("Managed mirror directory escapes the workspace.");let n=r;for(let s of o.split(P.sep)){n=P.join(n,s);let i=await promises.lstat(n);if(i.isSymbolicLink()||!i.isDirectory())throw new Error(`Managed mirror path must contain only real directories: ${n}`)}}function Zu(t,e){if(t.target)return t.target;if(t.source)return P.basename(t.source);if(t.url)try{let r=new URL(t.url).pathname,o=P.basename(r);if(o&&o!=="/")return o}catch{}return `${e}.artifact`}async function em(t){let e=t$1(t,"trusted-sources.lock").find(o=>existsSync(o)),r=new Set(["localhost","127.0.0.1"]);if(!e)return r;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("#"));for(let s of n)r.add(s.toLowerCase());}catch{}return r}async function tm(t,e,r){await M.ensureDir(P.dirname(e)),await new Promise((o,n)=>{let i=(t.startsWith("https://")?gp:mp).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let p=createWriteStream(e);c.pipe(p),p.on("finish",()=>{p.close(),o();}),p.on("error",d=>{n(d);});});i.setTimeout(r,()=>{i.destroy(new Error(`Request timeout after ${r}ms`));}),i.on("error",c=>{n(c);});});}async function rm(t,e,r,o,n){let s=new URL(t),i=JSON.stringify(e),c=s.protocol==="https:"?gp:mp;await new Promise((p,d)=>{let h=c.request({method:"POST",hostname:s.hostname,port:s.port||(s.protocol==="https:"?443:80),path:`${s.pathname}${s.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(i),...o?{Authorization:`Bearer ${o}`}:{},...n||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){d(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),p();});h.setTimeout(r,()=>{h.destroy(new Error(`Request timeout after ${r}ms`));}),h.on("error",u=>{d(u);}),h.write(i),h.end();});}function lp(t){return new Promise(e=>setTimeout(e,t))}async function om(t,e,r,o){let n=pt(t,e||".workspai/reports/evidence-export-dead-letter.ndjson");return await M.ensureDir(P.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:o,payload:r})}
152
152
  `,"utf-8"),n}function nm(t,e){if(!e?.enabled)return {headers:{}};let r=process.env[e.hmacKeyEnv];if(!r)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let o=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",s=createHmac(o,r).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:s,"x-rapidkit-evidence-signature-alg":o}}}async function sm(t,e,r){let o=(r.algorithm||"sha256").toLowerCase(),n=pt(t,r.publicKeyPath);if(!await M.pathExists(n))return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Public key not found: ${n}`};try{let s=await promises.readFile(n,"utf-8"),i=await promises.readFile(e),c=createVerify(o);c.update(i),c.end();let p=Buffer.from(r.signature,"base64"),d=c.verify(s,p),h=createHash("sha256").update(s).digest("hex");return {verified:d,algorithm:o,publicKeyPath:n,publicKeyFingerprint:h,signature:r.signature,message:d?"Attestation verified.":"Attestation signature verification failed."}}catch(s){return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Attestation verification error: ${s.message}`}}}async function am(t,e,r,o){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};let s=r.signaturePath?pt(t,r.signaturePath):null;if(!s||!await M.pathExists(s))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:s};let i=["verify-blob",e,"--signature",s],c=r.certificatePath?pt(t,r.certificatePath):null;c&&i.push("--certificate",c);let p=r.bundlePath?pt(t,r.bundlePath):null;p&&i.push("--bundle",p);let d=r.keyPath?pt(t,r.keyPath):null;d&&i.push("--key",d),r.identity&&i.push("--certificate-identity",r.identity),r.issuer&&i.push("--certificate-oidc-issuer",r.issuer),r.rekorUrl&&i.push("--rekor-url",r.rekorUrl),o.requireTransparencyLog||i.push("--insecure-ignore-tlog");try{let h=await execa("cosign",i,{reject:false});return h.exitCode===0?{verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:p,certificatePath:c,signaturePath:s}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${h.stderr||h.stdout||"unknown error"}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:p,certificatePath:c,signaturePath:s}}catch(h){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${h.message}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:p,certificatePath:c,signaturePath:s}}}async function im(t,e){let r=e.algorithm||"sha256",o=pt(t,e.policyPath),n=pt(t,e.signaturePath),s=pt(t,e.publicKeyPath);if(!await M.pathExists(o))return {verified:false,message:`Governance policy bundle not found: ${o}`,policies:null};if(!await M.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await M.pathExists(s))return {verified:false,message:`Governance policy public key not found: ${s}`,policies:null};try{let i=await promises.readFile(o,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),p=await promises.readFile(s,"utf-8"),d=createVerify(r);return d.update(i),d.end(),d.verify(p,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(i).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(i){return {verified:false,message:`Governance policy bundle verification error: ${i.message}`,policies:null}}}async function Ss(t$2,e){let r=[],o={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=t$1(t$2,"mirror-config.json").find(j=>existsSync(j))??q$1(t$2,"mirror-config.json"),s$1=q$1(t$2,"mirror.lock"),i=q$1(t$2,"mirror","artifacts"),c=q$1(t$2,"reports"),p=await em(t$2);if(!await M.pathExists(n))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .workspai/mirror-config.json not found."}),{checks:r,details:o};let d={};try{d=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return r.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:r,details:o}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||d.mode==="offline-only"))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:r,details:o};await M.ensureDir(i);try{await Qu(t$2,i);}catch(j){return r.push({id:"mirror.root.safety",status:"failed",message:j instanceof Error?j.message:String(j)}),{checks:r,details:o}}let u=Math.max(0,d.prefetch?.retries??2),f=Math.max(0,d.prefetch?.backoffMs??250),v=Math.max(1e3,d.prefetch?.timeoutMs??15e3),k=d.security?.requireAttestation===true,E=d.security?.requireSigstore===true,S=d.security?.requireTransparencyLog===true,$=d.security?.requireSignedGovernance===true,l=d.security?.evidenceExport,m=(process.env.RAPIDKIT_ENV||d.security?.governance?.environment||"dev").toLowerCase(),y=d.security?.governance?.policies||{};if(d.security?.governanceBundle){let j=await im(t$2,d.security.governanceBundle);if(r.push({id:"governance.bundle.verify",status:j.verified?"passed":"failed",message:j.message}),j.verified&&j.policies)y=j.policies,o.governanceBundleVerified=true;else if($)return {checks:r,details:o}}let w=y[m],g=S||w?.requireTransparencyLog===true,C=[],x=Array.isArray(d.artifacts)?d.artifacts:[],R=[];for(let j=0;j<x.length;j+=1){let A=x[j],O=A.id||`artifact-${j+1}`,J=A.source?pt(t$2,A.source):null,F=Zu(A,O),U;try{U=Xu(i,F),await cp(i,U);}catch(te){r.push({id:`mirror.target.${O}`,status:"failed",message:te instanceof Error?te.message:String(te)});continue}let H=false,ie=U,oe=false,he=async()=>{oe&&await promises.rm(ie,{force:true}).catch(()=>{});},Ke={sourceType:"path",source:J||A.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(J&&await M.pathExists(J))await M.ensureDir(P.dirname(U)),ie=`${U}.${process.pid}.${randomUUID()}.tmp`,oe=true,await promises.copyFile(J,ie),o.syncedArtifacts+=1,H=true,Ke={sourceType:"path",source:J,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},r.push({id:`mirror.sync.${O}`,status:"passed",message:`Mirrored artifact ${O} from source path.`});else if(A.url){let te="";try{te=new URL(A.url).hostname.toLowerCase();}catch{r.push({id:`mirror.prefetch.${O}`,status:"failed",message:`Invalid URL for ${O}: ${A.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||p.has(te))){r.push({id:`mirror.prefetch.trust.${O}`,status:"failed",message:`Untrusted mirror host for ${O}: ${te}. Add host to .workspai/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await M.pathExists(U)?(H=true,Ke={sourceType:"url",source:A.url,host:te,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},r.push({id:`mirror.prefetch.${O}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${O}.`})):r.push({id:`mirror.prefetch.${O}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${O} without an existing mirrored copy.`}),!H))continue;if(!H){await M.ensureDir(P.dirname(U)),ie=`${U}.${process.pid}.${randomUUID()}.tmp`,oe=true;let Y=null,_=0;for(let V=1;V<=u+1;V+=1){_=V;try{await promises.rm(ie,{force:true}).catch(()=>{}),await tm(A.url,ie,v),o.syncedArtifacts+=1,H=true,Ke={sourceType:"url",source:A.url,host:te,fetchedAt:new Date().toISOString(),attempts:_,trusted:true},r.push({id:`mirror.prefetch.${O}`,status:"passed",message:_>1?`Prefetched artifact ${O} from ${te} after ${_} attempts.`:`Prefetched artifact ${O} from ${te}.`});break}catch(K){if(Y=K,V<=u){await lp(f*V);continue}}}if(!H){await he(),r.push({id:`mirror.prefetch.${O}`,status:"failed",message:`Failed to prefetch ${O} after ${u+1} attempt(s): ${Y?.message||"unknown error"}`});continue}}if(!H){r.push({id:`mirror.prefetch.${O}`,status:"failed",message:`Failed to prefetch ${O}.`});continue}}if(!H){A.required||e.offlineMode?r.push({id:`mirror.sync.${O}`,status:"failed",message:`Mirror source missing for ${O}${J?`: ${J}`:""}`}):r.push({id:`mirror.sync.${O}`,status:"skipped",message:`Mirror source not found for optional artifact ${O}.`});continue}let He=await zu(ie);if(A.sha256&&A.sha256.toLowerCase()!==He.toLowerCase()){r.push({id:`mirror.verify.${O}`,status:"failed",message:`Checksum mismatch for ${O}.`}),await he();continue}o.verifiedArtifacts+=1,r.push({id:`mirror.verify.${O}`,status:"passed",message:`Checksum verified for ${O}.`});let ve=A.attestation?await sm(t$2,ie,A.attestation):null;if(A.attestation){if(r.push({id:`mirror.attest.${O}`,status:ve?.verified?"passed":"failed",message:ve?.message||"Attestation verification failed."}),!ve?.verified){await he();continue}}else if(k){r.push({id:`mirror.attest.${O}`,status:"failed",message:`Attestation is required but missing for ${O}.`}),await he();continue}else r.push({id:`mirror.attest.${O}`,status:"skipped",message:`No attestation provided for ${O}.`});let D=A.attestation?.sigstore,G=D?await am(t$2,ie,D,{requireTransparencyLog:g}):null;if(D){if(r.push({id:`mirror.sigstore.${O}`,status:G?.verified?"passed":"failed",message:G?.message||"Sigstore verification failed."}),C.push({artifactId:O,verified:!!G?.verified,tlogVerified:!!G?.tlogVerified,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,timestamp:new Date().toISOString(),environment:m}),!G?.verified){await he();continue}}else if(E){r.push({id:`mirror.sigstore.${O}`,status:"failed",message:`Sigstore attestation is required but missing for ${O}.`}),await he();continue}else r.push({id:`mirror.sigstore.${O}`,status:"skipped",message:`No Sigstore attestation provided for ${O}.`});if(D&&G?.verified&&w){let te=w.allowedIdentities||[];if(te.length>0){let Y=!!G.identity&&te.includes(G.identity);if(r.push({id:`mirror.sigstore.policy.identity.${O}`,status:Y?"passed":"failed",message:Y?`Sigstore identity policy passed for ${O} in ${m}.`:`Sigstore identity policy failed for ${O} in ${m}.`}),!Y){await he();continue}}let z=w.allowedIssuers||[];if(z.length>0){let Y=!!G.issuer&&z.includes(G.issuer);if(r.push({id:`mirror.sigstore.policy.issuer.${O}`,status:Y?"passed":"failed",message:Y?`Sigstore issuer policy passed for ${O} in ${m}.`:`Sigstore issuer policy failed for ${O} in ${m}.`}),!Y){await he();continue}}let ee=w.allowedRekorUrls||[];if(ee.length>0){let Y=!!G.rekorUrl&&ee.includes(G.rekorUrl);if(r.push({id:`mirror.sigstore.policy.rekor.${O}`,status:Y?"passed":"failed",message:Y?`Sigstore Rekor policy passed for ${O} in ${m}.`:`Sigstore Rekor policy failed for ${O} in ${m}.`}),!Y){await he();continue}}}else w&&r.push({id:`mirror.sigstore.policy.${O}`,status:"skipped",message:`Sigstore governance policy configured for ${m} but no verified Sigstore attestation for ${O}.`});oe&&(await cp(i,U),await promises.rename(ie,U),oe=false);let ne=await promises.stat(U);R.push({id:O,path:P.relative(t$2,U),sha256:He,size:ne.size,provenance:Ke,attestation:{detached:{provided:!!A.attestation,verified:ve?.verified||false,algorithm:ve?.algorithm||null,publicKeyPath:ve?.publicKeyPath||null,publicKeyFingerprint:ve?.publicKeyFingerprint||null,signature:ve?.signature||null,verifiedAt:ve?.verified?new Date().toISOString():null},sigstore:{provided:!!D,verified:G?.verified||false,tlogVerified:G?.tlogVerified||false,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,bundlePath:G?.bundlePath||null,certificatePath:G?.certificatePath||null,signaturePath:G?.signaturePath||null,verifiedAt:G?.verified?new Date().toISOString():null}}});}let b=d.retention?.keepLast;if(typeof b=="number"&&b>0){let j=new Set(R.map(O=>P.resolve(t$2,O.path))),A=(await Yu(i)).filter(O=>!j.has(P.resolve(O)));if(A.length>b){let O=await Promise.all(A.map(async F=>({filePath:F,stat:await promises.stat(F)})));O.sort((F,U)=>U.stat.mtimeMs-F.stat.mtimeMs);let J=O.slice(b);for(let F of J)await promises.unlink(F.filePath),o.rotatedFiles+=1;}}r.push({id:"mirror.rotate",status:"passed",message:o.rotatedFiles>0?`Mirror retention rotation removed ${o.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let T={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:d.mode||null,environment:m,artifacts:R};if(await promises.writeFile(s$1,`${JSON.stringify(T,null,2)}
153
153
  `,"utf-8"),o.lockWritten=true,r.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${P.relative(t$2,s$1)}.`}),o.transparencyEvidenceRecords=C.length,C.length>0){let j={schemaVersion:s.transparencyEvidence.schemaVersion,generatedAt:new Date().toISOString(),environment:m,records:C},A=new Date().toISOString().replace(/[:.]/g,"-"),O=P.join(c,`transparency-evidence-${A}.json`),J=P.join(c,"transparency-evidence.latest.json");if(b$n(`.workspai/reports/${P.basename(O)}`,j),b$n(t.transparencyEvidence,j),await M.ensureDir(c),await ip(O,j),await ip(J,j),o.transparencyEvidenceWritten=true,r.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${P.relative(t$2,J)}.`}),l?.enabled){let F=Math.max(1e3,l.timeoutMs??1e4);if(l.target==="file")if(!l.filePath)r.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let U=pt(t$2,l.filePath);await M.ensureDir(P.dirname(U)),await promises.appendFile(U,`${JSON.stringify(j)}
154
- `,"utf-8"),o.evidenceExported=true,o.evidenceExportTarget=U,r.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${U}.`});}catch(U){r.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${U.message}`});}else if(l.target==="http")if(!l.endpoint)r.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let U=Math.max(0,l.retries??0),H=Math.max(0,l.backoffMs??500),ie=nm(j,l.signing);ie.error&&r.push({id:"sigstore.evidence.export.http",status:"failed",message:ie.error});try{let oe=l.authTokenEnv?process.env[l.authTokenEnv]:void 0,he=false,Ke=null;for(let He=1;He<=U+1;He+=1)try{if(ie.error)throw new Error(ie.error);await rm(l.endpoint,j,F,oe,ie.headers),o.evidenceExported=true,o.evidenceExportTarget=l.endpoint,r.push({id:"sigstore.evidence.export.http",status:"passed",message:He>1?`Transparency evidence exported to HTTP endpoint ${l.endpoint} after ${He} attempts.`:`Transparency evidence exported to HTTP endpoint ${l.endpoint}.`}),he=true;break}catch(ve){Ke=ve,He<=U&&await lp(H*He);}if(!he)throw Ke||new Error("unknown evidence export error")}catch(oe){let he=`Evidence HTTP export failed: ${oe.message}`;r.push({id:"sigstore.evidence.export.http",status:"failed",message:he});try{let Ke=await om(t$2,l.deadLetterPath,j,he);r.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${Ke}.`});}catch(Ke){r.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${Ke.message}`});}}}if(l.failOnError&&r.some(H=>H.status==="failed"&&(H.id==="sigstore.evidence.export.file"||H.id==="sigstore.evidence.export.http")))return {checks:r,details:o}}else r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else r.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:r,details:o}}function nn(t){let e=f$5(t.detection.runtime),r=x({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),o=[];o.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),o.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),o.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),o.push({id:"lifecycle-commands",status:r.lifecycleCommands.length>1?"pass":"warn",message:r.lifecycleCommands.length>1?`Lifecycle commands available: ${r.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:r.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=o.some(i=>i.status==="fail"),s=o.some(i=>i.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":s?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:r.lifecycleCommands,unsupportedLifecycleCommands:r.unsupportedLifecycleCommands,moduleCommands:r.moduleCommands},checks:o}}function cm(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function sn(t){if(t.existingProjectJson?.module_support===true){let e=cm(t.existingProjectJson),r=e?a$4(e):void 0;return r?.owner==="core"&&r.moduleSupport===true}return false}var fp=[a$N,b$m];function lm(t,e){let r=P.relative(t,e);return r===""||r.length>0&&!r.startsWith("..")&&!P.isAbsolute(r)}async function st(t){let e=await M__default.realpath(t);for(let r of fp){let o=P.join(t,r),n=await M__default.lstat(o).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${o}`);let s=await M__default.realpath(o);if(!lm(e,s))throw new Error(`Project metadata directory resolves outside the project: ${o}`)}}async function hp(t){let e=P.basename(t);return fp.includes(e)?(await M__default.lstat(t)).isSymbolicLink():false}function yp(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function dm(t){let e=t.trim();if(!e)return "imported-project";let r=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),o=r[r.length-1]||e,n=o.split(":"),s=(n[n.length-1]||o).replace(/\.git$/i,"");return yp(s)||"imported-project"}function Nt(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function um(t){return Nt(t)?"git-url":"local-folder"}async function mm(t,e){let r=yp(e)||"imported-project",o=0;for(;;){let n=o===0?r:o===1?`${r}-imported`:`${r}-imported-${o}`,s=P.join(t,n);if(!await M__default.pathExists(s))return s;o+=1;}}function gm(t,e){let r=P.resolve(t),o=P.resolve(e),n=P.relative(r,o);return n===""||n.length>0&&!n.startsWith("..")&&!P.isAbsolute(n)}function fm(t,e){if(gm(t,e))throw new Error("Import source must be outside the current workspace root.")}function hm(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function ym(t){let e=P.basename(t);return !(await hp(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||hm(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function wm(t){await st(t);for(let e of u(t,"project.json"))if(await M__default.pathExists(e))try{return await M__default.readJson(e)}catch{return null}return null}async function km(t){await st(t.projectPath);let e=new Date().toISOString(),r=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),o=b$b({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:r}),n=o.contractRelativePath,s=v$1(t.projectPath,"project.json"),i=v$1(t.projectPath,"import.json"),c=v$1(t.projectPath,"import-readiness.json"),p=sn({existingProjectJson:t.existingProjectJson}),d=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],h=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},u={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:P.basename(t.projectPath),kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:p,modules:d,contracts:h,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:o.relativePath,is_external:o.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},f={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:P.basename(t.projectPath)},project:{name:u.name,slug:u.slug,relative_path:n,kind:t.projectKind,category:a$g(t.projectKind),module_support:p},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,category:a$g(t.projectKind),confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:p,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},v=nn({projectName:String(u.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:p,projectPath:t.projectPath,generatedAt:new Date(e)});return await M__default.ensureDir(P.dirname(s)),await M__default.writeJson(s,u,{spaces:2}),await M__default.writeJson(i,f,{spaces:2}),await M__default.writeJson(c,v,{spaces:2}),{projectJsonPath:s,importJsonPath:i,importReadinessPath:c,moduleSupport:p}}async function vm(t,e){let r={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,relationship:"imported",importedAt:new Date().toISOString()};await b$c(t,[r]);}async function Pm(t){await M__default.pathExists(t)&&(await st(t),await M__default.remove(t));}async function bm(t,e){await Pm(e),await c$4(t,[e]);}async function wp(t){let e=P.resolve(t.workspacePath),r=t.source.trim(),o=t.sourceType??um(r),n=t.name??(o==="git-url"?dm(r):P.basename(r)),s=await mm(e,n),i=false;try{if(o==="local-folder"){let m=P.resolve(r),y=await M__default.stat(m).catch(()=>null);if(!y||!y.isDirectory())throw new Error("Import source is not a directory.");if(await st(m),k$1(m))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");fm(e,m),i=true,await M__default.copy(m,s,{overwrite:false,errorOnExist:true,filter:ym});}else i=true,await execa("git",["clone","--depth","1","--",r,s],{timeout:12e4,env:a$f()});await st(s);let c=await wm(s),p=m$2(s,c),d=await b$a(s,c,{runtime:p.runtime,framework:p.key}),[h,u]=await Promise.all([p$5(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):o$2(e)]),f=n$3({profile:h,runtime:p.runtime,subjectLabel:P.basename(s),mode:u}),v=m$3({profile:h,runtimes:await q$3(e,{additionalRuntimes:[p.runtime]}),mode:u}),k=f.ok?v:f;if(!k.ok&&u==="strict")throw new Error(k.message);let E=await km({workspacePath:e,projectPath:s,sourceType:o,detection:p,existingProjectJson:c,projectKind:d,profileCompatibility:k}),S=b$b({workspacePath:e,projectPath:s,projectName:P.basename(s)}),$={ingestionPlan:Gt({action:"import-project",resourceKind:"project",sourceKind:o,mode:o==="git-url"?"clone":"copy",ownership:o==="git-url"?"materialized":"workspace-owned",registration:"project",source:o==="git-url"?r:P.resolve(r),targetWorkspace:e,destination:s,projectGrounding:t.projectGrounding??"managed"}),name:P.basename(s),path:s,relativePath:S.contractRelativePath,stack:p.importStack,runtime:p.runtime,framework:p.key,frameworkDisplayName:p.displayName,supportTier:p.supportTier,moduleSupport:E.moduleSupport,confidence:p.confidence,source:o,projectJsonPath:E.projectJsonPath,importJsonPath:E.importJsonPath,importReadinessPath:E.importReadinessPath,profileCompatibility:k};await vm(e,$);let{syncWorkspaceContract:l}=await import('./workspace-contract-E7GVWM7W.js');return await l({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:$.path,projectName:$.name,relationship:"imported",mode:t.projectGrounding??"managed"}),$}catch(c){if(i)try{await bm(e,s);let{syncWorkspaceContract:p}=await import('./workspace-contract-E7GVWM7W.js');await p({workspacePath:e,strict:true});}catch(p){let d=c instanceof Error?c.message:String(c),h=p instanceof Error?p.message:String(p);throw new Error(`Import failed: ${d}. Rollback also failed: ${h}`)}throw c}}function jm(t){return {schemaVersion:rn,sourceMode:"linked",sourceCodeModified:false,projectMetadataFiles:[".workspai/project.json",".workspai/adopt.json",".workspai/adopt-readiness.json",f$1,...t==="off"?[]:[h$2,g$3,b$9,i$1]],repositoryControlFiles:[{path:".gitignore",action:"reconcile",condition:"machine-local workspace binding and project-grounding portability rules"},...t==="managed"?[{path:"AGENTS.md",action:"reconcile",condition:"managed grounding is enabled and the path is a regular file; authored deletions and symbolic links are preserved"},{path:".agents/skills/workspai-*/SKILL.md",action:"reconcile",condition:"managed provider-neutral Skill discovery is enabled; authored collisions and unsafe symbolic links are preserved"},...g$4.map(e=>({path:e,action:"reconcile",condition:"managed provider adapter is enabled; authored content, deletions, symbolic links, and unsafe parent paths are preserved"}))]:[]],workspaceOperations:["register-project","sync-contract","rebuild-model","rebuild-graph","sync-agent-grounding"]}}function Cm(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function Sm(t,e){return P.resolve(t)===P.resolve(e)}async function Em(t){await st(t);for(let e of u(t,"project.json")){if(!await M__default.pathExists(e))continue;let r;try{r=JSON.parse((await M__default.readFile(e)).toString("utf8"));}catch(o){throw new Error(`Authoritative project metadata is malformed: ${e}: ${o instanceof Error?o.message:String(o)}`)}if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return r}return null}async function kp(t,e){let r=P.relative(t,e);if(r.startsWith("..")||P.isAbsolute(r))return true;let o=r.split(P.sep).slice(0,-1),n=t;for(let s of o){n=P.join(n,s);let i=await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)return false;if(i.isSymbolicLink()||!i.isDirectory())return true}return false}async function xm(t){let e=P.join(t,".amazonq"),r=await M__default.lstat(e).catch(s=>{if(s.code==="ENOENT")return null;throw s});if(!r)return [e,P.join(e,"rules")];if(r.isSymbolicLink()||!r.isDirectory())return [];let o=P.join(e,"rules");return await M__default.lstat(o).catch(s=>{if(s.code==="ENOENT")return null;throw s})?[]:[o]}async function vp(t,e){let r=[P.join(e,"AGENTS.md"),...g$4.map(n=>P.join(e,n))],o=[];for(let n of r){if(!(await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c}))?.isSymbolicLink())continue;let i=await a$e(e,n);i&&o.push(i);}return [v$1(e,"project.json"),v$1(e,"adopt.json"),v$1(e,"adopt-readiness.json"),P.join(e,f$1),P.join(e,g$3),P.join(e,h$2),P.join(e,b$9),...r,...o,P.join(e,".gitignore"),q$1(t,"imported-projects.json")].filter((n,s,i)=>i.indexOf(n)===s)}async function Es(t,e){let r=P.resolve(t),o=P.resolve(e);await st(o);let n=await vp(r,o);return {workspacePath:r,projectPath:o,files:await Promise.all(n.map(async s=>{if(s.startsWith(`${o}${P.sep}`)&&await kp(o,s))return {path:s,contents:null,preserve:"unsafe-parent"};let i=await M__default.lstat(s).catch(c=>{if(c.code==="ENOENT")return null;throw c});return i?.isSymbolicLink()?{path:s,contents:null,preserve:"symbolic-link"}:{path:s,contents:i?.isFile()?await M__default.readFile(s):null}})),createdAdapterDirectories:await xm(o)}}async function Pp(t,e,r){let o=(await vp(e,r)).map(s=>P.resolve(s)),n=new Set([".amazonq",".amazonq/rules"].map(s=>P.resolve(r,s)));if(t.workspacePath!==P.resolve(e)||t.projectPath!==P.resolve(r)||t.files.length!==o.length||t.files.some((s,i)=>P.resolve(s.path)!==o[i])||t.createdAdapterDirectories.some(s=>!n.has(P.resolve(s)))||new Set(t.createdAdapterDirectories.map(s=>P.resolve(s))).size!==t.createdAdapterDirectories.length)throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function Rm(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],r=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,framework:t.detection.key,kit:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:r,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,...t.isExternal?{}:{discovered_relative_path:t.discoveredRelativePath},is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function Am(t,e,r){await st(e),await Pp(r,t,e);let o=[];for(let n of r.files)try{if(n.preserve==="symbolic-link")continue;n.contents===null?await M__default.remove(n.path):(await M__default.ensureDir(P.dirname(n.path)),await M__default.writeFile(n.path,n.contents));}catch(s){o.push(s);}for(let n of [...r.createdAdapterDirectories].reverse())try{if(await kp(e,n))continue;await M__default.rmdir(n);}catch(s){let i=s.code;i!=="ENOENT"&&i!=="ENOTEMPTY"&&o.push(s);}if(o.length>0)throw new AggregateError(o,"Failed to restore adopt rollback snapshot.")}async function xs(t$1){let e=P.resolve(t$1.workspacePath),r=P.resolve(t$1.source),o=await M__default.stat(r).catch(()=>null);if(!o||!o.isDirectory())throw new Error("Adopt source is not a directory.");if(await st(r),Sm(e,r))throw new Error("Adopt source cannot be the workspace root itself.");if(k$1(r))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");let n=t$1.rollbackSnapshot??await Es(e,r);await Pp(n,e,r);let s=await Em(r),i=j$5(s),c=m$2(r,i?null:s),p=l$2(r),d=[c.runtime,...p.filter(b=>b!==c.runtime)].filter((b,T,j)=>b!=="unknown"&&j.indexOf(b)===T);d.length===0&&d.push("unknown");let h=await b$a(r,i?{}:s,{runtime:c.runtime,framework:c.key}),u=Cm(t$1.name||(typeof s?.name=="string"?s.name:"")||P.basename(r))||"adopted-project",f=b$b({workspacePath:e,projectPath:r,projectName:u}),v=(t$1.now??new Date).toISOString(),k=v$1(r,"project.json"),E=v$1(r,"adopt.json"),S=v$1(r,"adopt-readiness.json"),$=sn({existingProjectJson:s}),[l,m]=await Promise.all([p$5(e),t$1.profilePolicyMode?Promise.resolve(t$1.profilePolicyMode):o$2(e)]),y=n$3({profile:l,runtime:c.runtime,subjectLabel:u,mode:m}),w=m$3({profile:l,runtimes:await q$3(e,{additionalRuntimes:d,excludeProjectPath:r}),mode:m}),g=y.ok?w:y;if(!g.ok&&m==="strict")throw new Error(g.message);let C=Rm({projectName:u,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,discoveredRelativePath:f.relativePath,detection:c,runtimeCandidates:d,existingProjectJson:s,refreshManagedDetection:i,projectKind:h,moduleSupport:$,adoptedAt:v}),x={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:v,managed_by:"workspai",mode:"linked",workspace:{name:P.basename(e),contract:t.workspaceContract},project:{name:u,relative_path:f.contractRelativePath,...f.isExternal?{}:{discovered_relative_path:f.relativePath},is_external:f.isExternal,kind:h,category:a$g(h),module_support:$},detection:{framework:c.key,framework_display_name:c.displayName,runtime:c.runtime,runtime_candidates:d,kind:h,category:a$g(h),confidence:c.confidence,support_tier:c.supportTier,import_stack:c.importStack,source:c.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:$,workspace_contract:"linked-project",profile_compatibility:{ok:g.ok,profile:g.profile,runtimes:g.runtimes,message:g.message,recommended_profile:g.recommendedProfile,recommended_command:g.recommendedCommand}}},R=nn({projectName:u,relativePath:f.contractRelativePath,projectKind:h,source:"adopted-local",detection:c,moduleSupport:$,projectPath:r,generatedAt:new Date(v)});if(t$1.dryRun!==true)try{await st(r),await M__default.ensureDir(P.dirname(k)),await M__default.writeJson(k,C,{spaces:2}),await M__default.writeJson(E,x,{spaces:2}),await M__default.writeJson(S,R,{spaces:2});let b={name:u,path:r,relativePath:f.contractRelativePath,relationship:"adopted",stack:c.importStack,runtime:c.runtime,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:$,confidence:c.confidence,source:"adopted-local",importedAt:v};await b$c(e,[b]);let{syncWorkspaceContract:T}=await import('./workspace-contract-E7GVWM7W.js');await T({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:r,projectName:u,relationship:"adopted",mode:t$1.projectGrounding??"managed",now:new Date(v)});}catch(b){try{await Am(e,r,n);let{syncWorkspaceContract:T}=await import('./workspace-contract-E7GVWM7W.js');await T({workspacePath:e,strict:true});}catch(T){throw new AggregateError([b,T],`Adopt failed and rollback was incomplete: ${b instanceof Error?b.message:String(b)}`)}throw b}return {ingestionPlan:Gt({action:"adopt-project",resourceKind:"project",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"project",source:r,targetWorkspace:e,destination:r,projectGrounding:t$1.projectGrounding??"managed"}),name:u,path:r,relativePath:f.relativePath,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,relationship:"adopted",stack:c.importStack,runtime:c.runtime,runtimeCandidates:d,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:$,confidence:c.confidence,projectJsonPath:k,adoptJsonPath:E,adoptReadinessPath:S,profileCompatibility:g,effects:jm(t$1.projectGrounding??"managed"),wroteFiles:t$1.dryRun!==true}}async function _m(t){let e=await M__default.lstat(t).catch(()=>null);if(!e||!e.isDirectory()||e.isSymbolicLink())throw new Error(`Workspace path must be a real directory, not a symbolic link: ${t}`);for(let r of [".workspai",".rapidkit"]){let o=P.join(t,r),n=await M__default.lstat(o).catch(()=>null);if(n?.isSymbolicLink())throw new Error(`Workspace metadata directory must not be a symlink: ${o}`);if(n&&!n.isDirectory())throw new Error(`Workspace metadata path must be a directory: ${o}`)}}async function Im(t){let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(!o)continue;let n=await M__default.readdir(o,{withFileTypes:true}).catch(()=>[]);for(let s of n){if(s.isSymbolicLink())continue;let i=P.join(o,s.name);if(s.isDirectory()){if([".git","node_modules",".venv","dist","build","target"].includes(s.name)||a$h(s.name))continue;r.push(i);continue}s.isFile()&&s.name===e$6&&(await M__default.remove(i),e.push(P.relative(t,i).replace(/\\/g,"/")));}}return e.sort()}async function jp(t,e){if(await b$d(t,P.basename(t)),!(await g$5(t,true)).workspaceFound)throw new Error(`Workspace registry reconciliation failed: ${t}`);let o=await a$k(t,{silent:true,projectGrounding:e});return {writtenFiles:o.writtenFiles,warnings:o.warnings}}async function Rs(t){let e=P.resolve(t.workspacePath);await _m(e);let r=Gt({action:"connect-workspace",resourceKind:"workspace",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"workspace",source:e,destination:e,projectGrounding:t.projectGrounding??"managed"});if(!k$1(e))throw new Error(`Workspace path is not a valid Workspai workspace: ${e}`);if(t.dryRun)return ln(r,{status:"preview",workspacePath:e,registered:false,verified:true});let o=await c$5(e);try{let n=await jp(e,t.projectGrounding??"managed");return ln(r,{workspacePath:e,writtenFiles:n.writtenFiles,warnings:n.warnings,registered:true,verified:true})}catch(n){throw await d$6(e,o).catch(()=>{}),n}}async function As(t){if(t.dryRun){let o=await p$3({archivePathOrUrl:t.archivePathOrUrl,outputPath:t.outputPath,dryRun:true,strict:t.strict,safety:t.safety}),n=P.resolve(o.outputPath),s=bp(t,n);return ln(s,{status:"preview",workspacePath:n,registered:false,verified:true,warnings:(o.manifest?.externalProjects??[]).map(i=>`External project "${i.name}" must be relinked after import.`)})}let e=t.outputPath?P.resolve(t.outputPath):void 0;if(e&&await M__default.pathExists(e))throw new Error(`Workspace import destination already exists: ${e}. Choose a new --output path.`);let r;try{let o=await p$3({archivePathOrUrl:t.archivePathOrUrl,outputPath:e,strict:t.strict,safety:t.safety});r=P.resolve(o.outputPath);let n=bp(t,r);if(!k$1(r))throw new Error("Imported archive did not materialize a valid Workspai workspace.");let s=await Im(r);o.manifest?.portableContract&&await M__default.outputJson(P.join(r,".workspai","workspace.contract.json"),o.manifest.portableContract,{spaces:2});let i=await jp(r,t.projectGrounding??"managed");return ln(n,{workspacePath:r,writtenFiles:[...o.files.map(c=>c.path),...i.writtenFiles].filter((c,p,d)=>d.indexOf(c)===p),warnings:[...i.warnings,...(o.manifest?.externalProjects??[]).map(c=>`External project "${c.name}" must be relinked after import.`),...s.length>0?[`Rebuilt ${s.length} machine-local project workspace link(s).`]:[]],registered:true,verified:true})}catch(o){throw r&&(await e$4(r).catch(()=>{}),await M__default.remove(r).catch(()=>{})),o}}function bp(t,e){return Gt({action:"import-workspace",resourceKind:"workspace",sourceKind:"archive",mode:"hydrate",ownership:"workspace-owned",registration:"workspace",source:t.archivePathOrUrl,destination:e,projectGrounding:t.projectGrounding??"managed"})}function ln(t,e){let r={schemaVersion:tn,status:"passed",plan:t,writtenFiles:[],warnings:[],...e};return a$5(r,np,"Workspace ingestion result"),r}function Cp(t){let e={name:"Add existing software (local project, Git repository, or workspace)",value:"existing"};return t?[{name:"Create a project",value:"project"},e,{name:"Create another workspace (outside the current workspace)\u2026",value:"workspace"}]:[{name:"Create a workspace",value:"workspace"},{name:"Create a project",value:"project"},e]}function Sp(){return {type:"input",name:"source",message:"Local path, Git URL, or Workspai archive:",validate:t=>t.trim().length>0||"A source is required"}}function Ep(t){let e=t.trim(),r=e.startsWith("~/")?P.join(homedir(),e.slice(2)):e;if(/\.(?:workspai|rapidkit)-archive\.zip(?:[?#].*)?$/i.test(r)||!Nt(r)&&/\.zip$/i.test(r))return {kind:"workspace-archive",source:Nt(r)?r:P.resolve(r)};if(Nt(r))return {kind:"git-project",source:r};let n=P.resolve(r);return k$1(n)?{kind:"local-workspace",source:n}:{kind:"local-project",source:n}}var Tm=en,Mm=Qo;function Is(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function Wm(t=process.argv){let e=P.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function gr(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function Dm(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function Fe(t,e){let r=t.indexOf(e);if(r>=0&&r+1<t.length)return t[r+1];let o=t.find(n=>n.startsWith(`${e}=`));if(o)return o.slice(e.length+1)}function Lm(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let r=Number(e);if(!Number.isSafeInteger(r)||r<1||r>16)throw new Error("--max-workers must be an integer between 1 and 16.");return r}function Ds(t){try{return Lm(t.raw)}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"cli.option.max-workers.invalid",message:r,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(a$2.red(`\u274C ${r}`)),process.exit(1);}}async function Qs(t,e){let r=Fe(t,"--port")?.trim(),o=t[3];if(!r||!o||!/^\d+$/.test(r))return;let n=Number.parseInt(r,10);if(n<1||n>65535)return;let s=Fe(t,"--output")||".",i=P.resolve(e,s,o),c=u(i,"project.json").find(d=>I.existsSync(d))??v$1(i,"project.json");if(!await M__default.pathExists(c))return;let p=await M__default.readJson(c);await M__default.writeJson(c,{...p,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function Rp(t){let e=Ee(process.cwd()),r$1=t.trim().toLowerCase();if(!e||!r$1)return true;try{let[o,n]=await Promise.all([p$5(e),o$2(e)]),s=a$4(r$1),i=l$5(r$1),c=r$4(r$1),p=i?"node":c?.runtime??s?.runtime??"python",d=n$3({profile:o,runtime:p,subjectLabel:r$1,mode:n}),h=m$3({profile:o,runtimes:await q$3(e,{additionalRuntimes:[p]}),mode:n}),u=d.ok?h:d;if(u.ok)return true;let f=r(u);if(n==="strict")return console.log(a$2.red(`\u274C Profile violation (strict mode): ${u.message}`)),f&&console.log(a$2.gray(`\u{1F4A1} ${f}`)),false;console.log(a$2.yellow(`\u26A0\uFE0F Profile warning: ${u.message}`)),f&&console.log(a$2.gray(`\u{1F4A1} ${f}`));}catch{}return true}function Zs(){return j$8()}function Ls(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(P.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(P.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=i$4()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function Fm(t){return m$6(P.join(t,".venv"))}async function Gm(t,e){return await je(t,["--version"],e)===0}async function Jm(t,e){return new Promise(r=>{let o=spawn(t,["--version"],{cwd:e,stdio:"ignore",env:Ls()});o.once("error",()=>r(false)),o.once("close",n=>r(n===0));})}async function Kt(t){let e=P.join(t,"go.mod");if(await M__default.pathExists(e))return "go";let r=P.join(t,"pom.xml"),o=P.join(t,"build.gradle"),n=P.join(t,"build.gradle.kts");if(await M__default.pathExists(r)||await M__default.pathExists(o)||await M__default.pathExists(n))return "java";if((await M__default.pathExists(t)?await I.promises.readdir(t,{withFileTypes:true}):[]).some(v=>v.isFile()&&v.name.toLowerCase().endsWith(".sln")))return "dotnet";let i=P.join(t,"src");if(await M__default.pathExists(i)&&(await I.promises.readdir(i,{withFileTypes:true})).some(k=>k.isFile()&&k.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=P.join(t,"Cargo.toml");if(await M__default.pathExists(c))return "rust";let p=P.join(t,"composer.json");if(await M__default.pathExists(p))return "php";let d=P.join(t,"package.json");if(await M__default.pathExists(d))return "node";let h=P.join(t,"pyproject.toml"),u=P.join(t,"requirements.txt"),f=P.join(t,"poetry.lock");return await M__default.pathExists(h)||await M__default.pathExists(u)||await M__default.pathExists(f)?"python":null}async function Vm(t,e={}){let r=e.runCommand??je,o=P.join(t,".venv"),n=await M__default.pathExists(o);for(let s of e.pythonCandidates??Zs()){if(await r(s,s==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;n||await M__default.remove(o);}return 1}async function Km(t,e={}){let r=e.runCommand??je,o=P.join(t,".venv"),n=m$6(o);if(await M__default.pathExists(n)){if(await r(n,["-m","pip","--version"],t)===0)return 0;await M__default.remove(o);}let s=await Vm(t,e);if(s!==0)return s;n=m$6(o);let i=await r(n,["-m","pip","--version"],t);return i!==0&&await M__default.remove(o),i}async function Kp(t,e={}){let r=e.runCommand??je;for(let o of e.pythonCandidates??Zs())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Hm(t,e={}){let r=e.runCommand??je,o=m$6(P.join(t,".venv"));if(!await M__default.pathExists(o)){let d=await Kp(t,e);if(d!==0)return d}let n=process.platform==="win32"?P.join(t,".venv","Scripts","poetry.exe"):P.join(t,".venv","bin","poetry"),s=e.runCommand?await r("poetry",["--version"],t)===0:await Jm("poetry",t),i=await M__default.pathExists(n)?n:s?"poetry":null;if(!i)return 0;let c=await r(i,["config","virtualenvs.in-project","true","--local"],t);if(c!==0)return c;let p=await r(i,["env","use",o],t);return p!==0?p:0}async function Um(t,e={}){let r=e.runCommand??je,o=m$6(P.join(t,".venv"));if(!await M__default.pathExists(o)){let i=await Kp(t,e);if(i!==0)return i}await r(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=P.join(t,"requirements.txt");if(await M__default.pathExists(n)&&await r(o,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let s=P.join(t,"pyproject.toml");return await M__default.pathExists(s)&&(await r(o,["-m","pip","install","-e","."],t)===0||await r(o,["-m","pip","install","."],t)===0)?0:1}async function Os(t,e){return await Hm(t)!==0&&console.log(a$2.yellow("\u26A0\uFE0F Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await M__default.pathExists(P.join(t,".venv"))?0:(console.log(a$2.yellow("\u26A0\uFE0F Python init fallback: installing dependencies directly into project .venv")),await Um(t))}async function Ns(t){let e=await Vt("init",t);if(e===0)return 0;let r=["npm","pnpm","yarn"];for(let o of r){if(!await Gm(o,t))continue;if(await je(o,["install"],t)===0)return console.log(a$2.green(`\u2705 Node init fallback succeeded with ${o} install`)),0}return e}function Bm(t,e){let r=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),o=Fe([...e],"--port");if(o&&!/^\d+$/.test(o.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=Fe([...e],"--java-version"),s=Fe([...e],"--spring-boot-version"),i=Fe([...e],"--springdoc-version"),c=Fe([...e],"--group-id"),p=Fe([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(s&&!r(s.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(i&&!r(i.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(p&&!/^[A-Za-z0-9_.-]+$/.test(p.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=Fe([...e],"--target-framework"),s=Fe([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(s&&!/^[A-Za-z0-9_.]+$/.test(s.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function Ap(t){if(t.includes("--dry-run")||t.includes("--no-workspace")||Hs(process.cwd()))return;let e=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:o}=await import('./create-7CWWGDXQ.js');await o(process.cwd(),{skipGit:e,yes:t.includes("--yes")||t.includes("-y"),userConfig:await b()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:r}=await b$1([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},{name:"Create it without workspace management",value:"none"}],default:1}]);if(r==="current"){let{registerWorkspaceAtPath:o}=await import('./create-7CWWGDXQ.js');await o(process.cwd(),{skipGit:e,yes:false,userConfig:await b()});}else r==="none"&&t.push("--no-workspace");}async function qm(t){await M__default.ensureDir(t);let e=P.join(t,"lifecycle.lock"),r=Date.now();for(;;)try{let o=await I.promises.open(e,"wx");return await o.writeFile(`${JSON.stringify({pid:process.pid})}
155
- `),async()=>{await o.close().catch(()=>{}),await M__default.remove(e).catch(()=>{});}}catch(o){if(o.code!=="EEXIST")throw o;let n=await M__default.readJson(e).catch(()=>null),s=Number(n?.pid),i=false;if(Number.isInteger(s)&&s>0)try{process.kill(s,0),i=true;}catch(c){i=c.code==="EPERM";}if(!i){await M__default.remove(e).catch(()=>{});continue}if(Date.now()-r>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function mn(t,e={}){let r=P.join(q$2(),"transactions"),o=await qm(r),n;try{await b$8(r),n=await a$b({journalDirectory:r});}catch(i){throw await o(),i}let s=new Set([P.join(q$2(),"workspaces.json"),P.join(r$1(),"workspaces.json"),a$c(t,g$2),e$5(t,g$2),a$c(t,a$d),e$5(t,a$d),...t$1(t,"imported-projects.json")]);if(e.projectPath){s.add(v$1(e.projectPath,"project.json")),s.add(v$1(e.projectPath,"context.json")),s.add(v$1(e.projectPath,"file-hashes.json")),s.add(v$1(e.projectPath,"adopt.json")),s.add(v$1(e.projectPath,"adopt-readiness.json")),s.add(P.join(e.projectPath,f$1)),s.add(P.join(e.projectPath,g$3)),s.add(P.join(e.projectPath,h$2)),s.add(P.join(e.projectPath,b$9)),s.add(P.join(e.projectPath,i$1));for(let i of g$4)s.add(P.join(e.projectPath,i));for(let i of await j$4({workspacePath:t,projectPath:e.projectPath}))s.add(i);s.add(P.join(e.projectPath,"AGENTS.md")),s.add(P.join(e.projectPath,".gitignore"));}try{let i=new Set,c=e.projectPath;for(let d of s){let u=c&&(d===P.join(c,"AGENTS.md")||g$4.some(v=>d===P.join(c,v)))?await M__default.lstat(d).catch(v=>{if(v.code==="ENOENT")return null;throw v}):null,f=d;if(u?.isSymbolicLink()&&c){let v=await a$e(c,d);if(!v)continue;f=v;}i.has(f)||(await n.captureFile(f),i.add(f));}e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let p=false;return {registerCompensation:d=>n.registerCompensation(d),commit:async()=>{p||(await n.commit(),p=true,await o());},rollback:async()=>{if(!p){p=true;try{await n.rollback();}finally{await o();}}}}}catch(i){throw await n.rollback().catch(()=>{}),await o(),i}}async function fr(t,e){try{await t.rollback();}catch(r){throw new AggregateError([e,r],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function zr(t,e$1,r){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await M__default.pathExists(e$1)){e.warn(`Created project path was not found for workspace linking: ${e$1}`);return}let o=Ee(e$1)||Ee(process.cwd()),n=false,s;if(o)s=await mn(o,{projectPath:e$1});else {o=p$1(),s=await mn(o,{projectPath:e$1,ownedWorkspace:o});try{o=(await ea()).workspacePath;}catch(c){await fr(s,c);}n=true;}let i="managed";try{await p$4(e$1);let c=P.relative(o,e$1);(c.startsWith("..")||P.isAbsolute(c))&&(i=(await xs({source:e$1,workspacePath:o,name:r})).relationship);let{registerProjectInWorkspaceStrict:d,registerWorkspaceStrict:h}=await import('./workspace-E3MM3AIE.js'),{syncWorkspaceContract:u}=await import('./workspace-contract-E7GVWM7W.js');await h(o,P.basename(o)),await d(o,r,e$1),await u({workspacePath:o,strict:true});let{syncProjectIntelligenceLens:f}=await import('./project-intelligence-lens-QTQEZXUY.js');await f({workspacePath:o,projectPath:e$1,projectName:r,relationship:i==="adopted"?"adopted":"managed",mode:"managed"}),await Yr(o,{strict:true}),await s.commit();}catch(c){await fr(s,c);}return n&&(console.log(a$2.gray(`\u2139\uFE0F Project created outside a Workspai workspace \u2014 linked to managed workspace "${j$3}" (${i}).`)),console.log(a$2.gray(` Registry: ${P.join(q$2(),"workspaces.json")}`)),console.log(a$2.gray(` Workspace: ${o}`))),o}async function Fs(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],r=a$4(e),o=t[3];if(!r||r.owner!=="npm")return 1;if(!o)return process.stderr.write(`Usage: ${r.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
154
+ `,"utf-8"),o.evidenceExported=true,o.evidenceExportTarget=U,r.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${U}.`});}catch(U){r.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${U.message}`});}else if(l.target==="http")if(!l.endpoint)r.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let U=Math.max(0,l.retries??0),H=Math.max(0,l.backoffMs??500),ie=nm(j,l.signing);ie.error&&r.push({id:"sigstore.evidence.export.http",status:"failed",message:ie.error});try{let oe=l.authTokenEnv?process.env[l.authTokenEnv]:void 0,he=false,Ke=null;for(let He=1;He<=U+1;He+=1)try{if(ie.error)throw new Error(ie.error);await rm(l.endpoint,j,F,oe,ie.headers),o.evidenceExported=true,o.evidenceExportTarget=l.endpoint,r.push({id:"sigstore.evidence.export.http",status:"passed",message:He>1?`Transparency evidence exported to HTTP endpoint ${l.endpoint} after ${He} attempts.`:`Transparency evidence exported to HTTP endpoint ${l.endpoint}.`}),he=true;break}catch(ve){Ke=ve,He<=U&&await lp(H*He);}if(!he)throw Ke||new Error("unknown evidence export error")}catch(oe){let he=`Evidence HTTP export failed: ${oe.message}`;r.push({id:"sigstore.evidence.export.http",status:"failed",message:he});try{let Ke=await om(t$2,l.deadLetterPath,j,he);r.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${Ke}.`});}catch(Ke){r.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${Ke.message}`});}}}if(l.failOnError&&r.some(H=>H.status==="failed"&&(H.id==="sigstore.evidence.export.file"||H.id==="sigstore.evidence.export.http")))return {checks:r,details:o}}else r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else r.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:r,details:o}}function nn(t){let e=f$5(t.detection.runtime),r=x({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),o=[];o.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),o.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),o.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),o.push({id:"lifecycle-commands",status:r.lifecycleCommands.length>1?"pass":"warn",message:r.lifecycleCommands.length>1?`Lifecycle commands available: ${r.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:r.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=o.some(i=>i.status==="fail"),s=o.some(i=>i.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":s?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:r.lifecycleCommands,unsupportedLifecycleCommands:r.unsupportedLifecycleCommands,moduleCommands:r.moduleCommands},checks:o}}function cm(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function sn(t){if(t.existingProjectJson?.module_support===true){let e=cm(t.existingProjectJson),r=e?a$4(e):void 0;return r?.owner==="core"&&r.moduleSupport===true}return false}var fp=[a$N,b$m];function lm(t,e){let r=P.relative(t,e);return r===""||r.length>0&&!r.startsWith("..")&&!P.isAbsolute(r)}async function st(t){let e=await M__default.realpath(t);for(let r of fp){let o=P.join(t,r),n=await M__default.lstat(o).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${o}`);let s=await M__default.realpath(o);if(!lm(e,s))throw new Error(`Project metadata directory resolves outside the project: ${o}`)}}async function hp(t){let e=P.basename(t);return fp.includes(e)?(await M__default.lstat(t)).isSymbolicLink():false}function yp(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function dm(t){let e=t.trim();if(!e)return "imported-project";let r=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),o=r[r.length-1]||e,n=o.split(":"),s=(n[n.length-1]||o).replace(/\.git$/i,"");return yp(s)||"imported-project"}function Nt(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function um(t){return Nt(t)?"git-url":"local-folder"}async function mm(t,e){let r=yp(e)||"imported-project",o=0;for(;;){let n=o===0?r:o===1?`${r}-imported`:`${r}-imported-${o}`,s=P.join(t,n);if(!await M__default.pathExists(s))return s;o+=1;}}function gm(t,e){let r=P.resolve(t),o=P.resolve(e),n=P.relative(r,o);return n===""||n.length>0&&!n.startsWith("..")&&!P.isAbsolute(n)}function fm(t,e){if(gm(t,e))throw new Error("Import source must be outside the current workspace root.")}function hm(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function ym(t){let e=P.basename(t);return !(await hp(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||hm(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function wm(t){await st(t);for(let e of u(t,"project.json"))if(await M__default.pathExists(e))try{return await M__default.readJson(e)}catch{return null}return null}async function km(t){await st(t.projectPath);let e=new Date().toISOString(),r=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),o=b$b({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:r}),n=o.contractRelativePath,s=v$1(t.projectPath,"project.json"),i=v$1(t.projectPath,"import.json"),c=v$1(t.projectPath,"import-readiness.json"),p=sn({existingProjectJson:t.existingProjectJson}),d=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],h=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},u={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:P.basename(t.projectPath),kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:p,modules:d,contracts:h,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:o.relativePath,is_external:o.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},f={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:P.basename(t.projectPath)},project:{name:u.name,slug:u.slug,relative_path:n,kind:t.projectKind,category:a$g(t.projectKind),module_support:p},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,category:a$g(t.projectKind),confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:p,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},v=nn({projectName:String(u.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:p,projectPath:t.projectPath,generatedAt:new Date(e)});return await M__default.ensureDir(P.dirname(s)),await M__default.writeJson(s,u,{spaces:2}),await M__default.writeJson(i,f,{spaces:2}),await M__default.writeJson(c,v,{spaces:2}),{projectJsonPath:s,importJsonPath:i,importReadinessPath:c,moduleSupport:p}}async function vm(t,e){let r={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,relationship:"imported",importedAt:new Date().toISOString()};await b$c(t,[r]);}async function Pm(t){await M__default.pathExists(t)&&(await st(t),await M__default.remove(t));}async function bm(t,e){await Pm(e),await c$4(t,[e]);}async function wp(t){let e=P.resolve(t.workspacePath),r=t.source.trim(),o=t.sourceType??um(r),n=t.name??(o==="git-url"?dm(r):P.basename(r)),s=await mm(e,n),i=false;try{if(o==="local-folder"){let m=P.resolve(r),y=await M__default.stat(m).catch(()=>null);if(!y||!y.isDirectory())throw new Error("Import source is not a directory.");if(await st(m),k$1(m))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");fm(e,m),i=true,await M__default.copy(m,s,{overwrite:false,errorOnExist:true,filter:ym});}else i=true,await execa("git",["clone","--depth","1","--",r,s],{timeout:12e4,env:a$f()});await st(s);let c=await wm(s),p=m$2(s,c),d=await b$a(s,c,{runtime:p.runtime,framework:p.key}),[h,u]=await Promise.all([p$5(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):o$2(e)]),f=n$3({profile:h,runtime:p.runtime,subjectLabel:P.basename(s),mode:u}),v=m$3({profile:h,runtimes:await q$3(e,{additionalRuntimes:[p.runtime]}),mode:u}),k=f.ok?v:f;if(!k.ok&&u==="strict")throw new Error(k.message);let E=await km({workspacePath:e,projectPath:s,sourceType:o,detection:p,existingProjectJson:c,projectKind:d,profileCompatibility:k}),S=b$b({workspacePath:e,projectPath:s,projectName:P.basename(s)}),$={ingestionPlan:Gt({action:"import-project",resourceKind:"project",sourceKind:o,mode:o==="git-url"?"clone":"copy",ownership:o==="git-url"?"materialized":"workspace-owned",registration:"project",source:o==="git-url"?r:P.resolve(r),targetWorkspace:e,destination:s,projectGrounding:t.projectGrounding??"managed"}),name:P.basename(s),path:s,relativePath:S.contractRelativePath,stack:p.importStack,runtime:p.runtime,framework:p.key,frameworkDisplayName:p.displayName,supportTier:p.supportTier,moduleSupport:E.moduleSupport,confidence:p.confidence,source:o,projectJsonPath:E.projectJsonPath,importJsonPath:E.importJsonPath,importReadinessPath:E.importReadinessPath,profileCompatibility:k};await vm(e,$);let{syncWorkspaceContract:l}=await import('./workspace-contract-2V2BI6A3.js');return await l({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:$.path,projectName:$.name,relationship:"imported",mode:t.projectGrounding??"managed"}),$}catch(c){if(i)try{await bm(e,s);let{syncWorkspaceContract:p}=await import('./workspace-contract-2V2BI6A3.js');await p({workspacePath:e,strict:true});}catch(p){let d=c instanceof Error?c.message:String(c),h=p instanceof Error?p.message:String(p);throw new Error(`Import failed: ${d}. Rollback also failed: ${h}`)}throw c}}function jm(t){return {schemaVersion:rn,sourceMode:"linked",sourceCodeModified:false,projectMetadataFiles:[".workspai/project.json",".workspai/adopt.json",".workspai/adopt-readiness.json",f$1,...t==="off"?[]:[h$2,g$3,b$9,i$1]],repositoryControlFiles:[{path:".gitignore",action:"reconcile",condition:"machine-local workspace binding and project-grounding portability rules"},...t==="managed"?[{path:"AGENTS.md",action:"reconcile",condition:"managed grounding is enabled and the path is a regular file; authored deletions and symbolic links are preserved"},{path:".agents/skills/workspai-*/SKILL.md",action:"reconcile",condition:"managed provider-neutral Skill discovery is enabled; authored collisions and unsafe symbolic links are preserved"},...g$4.map(e=>({path:e,action:"reconcile",condition:"managed provider adapter is enabled; authored content, deletions, symbolic links, and unsafe parent paths are preserved"}))]:[]],workspaceOperations:["register-project","sync-contract","rebuild-model","rebuild-graph","sync-agent-grounding"]}}function Cm(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function Sm(t,e){return P.resolve(t)===P.resolve(e)}async function Em(t){await st(t);for(let e of u(t,"project.json")){if(!await M__default.pathExists(e))continue;let r;try{r=JSON.parse((await M__default.readFile(e)).toString("utf8"));}catch(o){throw new Error(`Authoritative project metadata is malformed: ${e}: ${o instanceof Error?o.message:String(o)}`)}if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return r}return null}async function kp(t,e){let r=P.relative(t,e);if(r.startsWith("..")||P.isAbsolute(r))return true;let o=r.split(P.sep).slice(0,-1),n=t;for(let s of o){n=P.join(n,s);let i=await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)return false;if(i.isSymbolicLink()||!i.isDirectory())return true}return false}async function xm(t){let e=P.join(t,".amazonq"),r=await M__default.lstat(e).catch(s=>{if(s.code==="ENOENT")return null;throw s});if(!r)return [e,P.join(e,"rules")];if(r.isSymbolicLink()||!r.isDirectory())return [];let o=P.join(e,"rules");return await M__default.lstat(o).catch(s=>{if(s.code==="ENOENT")return null;throw s})?[]:[o]}async function vp(t,e){let r=[P.join(e,"AGENTS.md"),...g$4.map(n=>P.join(e,n))],o=[];for(let n of r){if(!(await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c}))?.isSymbolicLink())continue;let i=await a$e(e,n);i&&o.push(i);}return [v$1(e,"project.json"),v$1(e,"adopt.json"),v$1(e,"adopt-readiness.json"),P.join(e,f$1),P.join(e,g$3),P.join(e,h$2),P.join(e,b$9),...r,...o,P.join(e,".gitignore"),q$1(t,"imported-projects.json")].filter((n,s,i)=>i.indexOf(n)===s)}async function Es(t,e){let r=P.resolve(t),o=P.resolve(e);await st(o);let n=await vp(r,o);return {workspacePath:r,projectPath:o,files:await Promise.all(n.map(async s=>{if(s.startsWith(`${o}${P.sep}`)&&await kp(o,s))return {path:s,contents:null,preserve:"unsafe-parent"};let i=await M__default.lstat(s).catch(c=>{if(c.code==="ENOENT")return null;throw c});return i?.isSymbolicLink()?{path:s,contents:null,preserve:"symbolic-link"}:{path:s,contents:i?.isFile()?await M__default.readFile(s):null}})),createdAdapterDirectories:await xm(o)}}async function Pp(t,e,r){let o=(await vp(e,r)).map(s=>P.resolve(s)),n=new Set([".amazonq",".amazonq/rules"].map(s=>P.resolve(r,s)));if(t.workspacePath!==P.resolve(e)||t.projectPath!==P.resolve(r)||t.files.length!==o.length||t.files.some((s,i)=>P.resolve(s.path)!==o[i])||t.createdAdapterDirectories.some(s=>!n.has(P.resolve(s)))||new Set(t.createdAdapterDirectories.map(s=>P.resolve(s))).size!==t.createdAdapterDirectories.length)throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function Rm(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],r=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,framework:t.detection.key,kit:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:r,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,...t.isExternal?{}:{discovered_relative_path:t.discoveredRelativePath},is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function Am(t,e,r){await st(e),await Pp(r,t,e);let o=[];for(let n of r.files)try{if(n.preserve==="symbolic-link")continue;n.contents===null?await M__default.remove(n.path):(await M__default.ensureDir(P.dirname(n.path)),await M__default.writeFile(n.path,n.contents));}catch(s){o.push(s);}for(let n of [...r.createdAdapterDirectories].reverse())try{if(await kp(e,n))continue;await M__default.rmdir(n);}catch(s){let i=s.code;i!=="ENOENT"&&i!=="ENOTEMPTY"&&o.push(s);}if(o.length>0)throw new AggregateError(o,"Failed to restore adopt rollback snapshot.")}async function xs(t$1){let e=P.resolve(t$1.workspacePath),r=P.resolve(t$1.source),o=await M__default.stat(r).catch(()=>null);if(!o||!o.isDirectory())throw new Error("Adopt source is not a directory.");if(await st(r),Sm(e,r))throw new Error("Adopt source cannot be the workspace root itself.");if(k$1(r))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");let n=t$1.rollbackSnapshot??await Es(e,r);await Pp(n,e,r);let s=await Em(r),i=j$5(s),c=m$2(r,i?null:s),p=l$2(r),d=[c.runtime,...p.filter(b=>b!==c.runtime)].filter((b,T,j)=>b!=="unknown"&&j.indexOf(b)===T);d.length===0&&d.push("unknown");let h=await b$a(r,i?{}:s,{runtime:c.runtime,framework:c.key}),u=Cm(t$1.name||(typeof s?.name=="string"?s.name:"")||P.basename(r))||"adopted-project",f=b$b({workspacePath:e,projectPath:r,projectName:u}),v=(t$1.now??new Date).toISOString(),k=v$1(r,"project.json"),E=v$1(r,"adopt.json"),S=v$1(r,"adopt-readiness.json"),$=sn({existingProjectJson:s}),[l,m]=await Promise.all([p$5(e),t$1.profilePolicyMode?Promise.resolve(t$1.profilePolicyMode):o$2(e)]),y=n$3({profile:l,runtime:c.runtime,subjectLabel:u,mode:m}),w=m$3({profile:l,runtimes:await q$3(e,{additionalRuntimes:d,excludeProjectPath:r}),mode:m}),g=y.ok?w:y;if(!g.ok&&m==="strict")throw new Error(g.message);let C=Rm({projectName:u,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,discoveredRelativePath:f.relativePath,detection:c,runtimeCandidates:d,existingProjectJson:s,refreshManagedDetection:i,projectKind:h,moduleSupport:$,adoptedAt:v}),x={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:v,managed_by:"workspai",mode:"linked",workspace:{name:P.basename(e),contract:t.workspaceContract},project:{name:u,relative_path:f.contractRelativePath,...f.isExternal?{}:{discovered_relative_path:f.relativePath},is_external:f.isExternal,kind:h,category:a$g(h),module_support:$},detection:{framework:c.key,framework_display_name:c.displayName,runtime:c.runtime,runtime_candidates:d,kind:h,category:a$g(h),confidence:c.confidence,support_tier:c.supportTier,import_stack:c.importStack,source:c.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:$,workspace_contract:"linked-project",profile_compatibility:{ok:g.ok,profile:g.profile,runtimes:g.runtimes,message:g.message,recommended_profile:g.recommendedProfile,recommended_command:g.recommendedCommand}}},R=nn({projectName:u,relativePath:f.contractRelativePath,projectKind:h,source:"adopted-local",detection:c,moduleSupport:$,projectPath:r,generatedAt:new Date(v)});if(t$1.dryRun!==true)try{await st(r),await M__default.ensureDir(P.dirname(k)),await M__default.writeJson(k,C,{spaces:2}),await M__default.writeJson(E,x,{spaces:2}),await M__default.writeJson(S,R,{spaces:2});let b={name:u,path:r,relativePath:f.contractRelativePath,relationship:"adopted",stack:c.importStack,runtime:c.runtime,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:$,confidence:c.confidence,source:"adopted-local",importedAt:v};await b$c(e,[b]);let{syncWorkspaceContract:T}=await import('./workspace-contract-2V2BI6A3.js');await T({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:r,projectName:u,relationship:"adopted",mode:t$1.projectGrounding??"managed",now:new Date(v)});}catch(b){try{await Am(e,r,n);let{syncWorkspaceContract:T}=await import('./workspace-contract-2V2BI6A3.js');await T({workspacePath:e,strict:true});}catch(T){throw new AggregateError([b,T],`Adopt failed and rollback was incomplete: ${b instanceof Error?b.message:String(b)}`)}throw b}return {ingestionPlan:Gt({action:"adopt-project",resourceKind:"project",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"project",source:r,targetWorkspace:e,destination:r,projectGrounding:t$1.projectGrounding??"managed"}),name:u,path:r,relativePath:f.relativePath,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,relationship:"adopted",stack:c.importStack,runtime:c.runtime,runtimeCandidates:d,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:$,confidence:c.confidence,projectJsonPath:k,adoptJsonPath:E,adoptReadinessPath:S,profileCompatibility:g,effects:jm(t$1.projectGrounding??"managed"),wroteFiles:t$1.dryRun!==true}}async function _m(t){let e=await M__default.lstat(t).catch(()=>null);if(!e||!e.isDirectory()||e.isSymbolicLink())throw new Error(`Workspace path must be a real directory, not a symbolic link: ${t}`);for(let r of [".workspai",".rapidkit"]){let o=P.join(t,r),n=await M__default.lstat(o).catch(()=>null);if(n?.isSymbolicLink())throw new Error(`Workspace metadata directory must not be a symlink: ${o}`);if(n&&!n.isDirectory())throw new Error(`Workspace metadata path must be a directory: ${o}`)}}async function Im(t){let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(!o)continue;let n=await M__default.readdir(o,{withFileTypes:true}).catch(()=>[]);for(let s of n){if(s.isSymbolicLink())continue;let i=P.join(o,s.name);if(s.isDirectory()){if([".git","node_modules",".venv","dist","build","target"].includes(s.name)||a$h(s.name))continue;r.push(i);continue}s.isFile()&&s.name===e$6&&(await M__default.remove(i),e.push(P.relative(t,i).replace(/\\/g,"/")));}}return e.sort()}async function jp(t,e){if(await b$d(t,P.basename(t)),!(await g$5(t,true)).workspaceFound)throw new Error(`Workspace registry reconciliation failed: ${t}`);let o=await a$k(t,{silent:true,projectGrounding:e});return {writtenFiles:o.writtenFiles,warnings:o.warnings}}async function Rs(t){let e=P.resolve(t.workspacePath);await _m(e);let r=Gt({action:"connect-workspace",resourceKind:"workspace",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"workspace",source:e,destination:e,projectGrounding:t.projectGrounding??"managed"});if(!k$1(e))throw new Error(`Workspace path is not a valid Workspai workspace: ${e}`);if(t.dryRun)return ln(r,{status:"preview",workspacePath:e,registered:false,verified:true});let o=await c$5(e);try{let n=await jp(e,t.projectGrounding??"managed");return ln(r,{workspacePath:e,writtenFiles:n.writtenFiles,warnings:n.warnings,registered:true,verified:true})}catch(n){throw await d$6(e,o).catch(()=>{}),n}}async function As(t){if(t.dryRun){let o=await p$3({archivePathOrUrl:t.archivePathOrUrl,outputPath:t.outputPath,dryRun:true,strict:t.strict,safety:t.safety}),n=P.resolve(o.outputPath),s=bp(t,n);return ln(s,{status:"preview",workspacePath:n,registered:false,verified:true,warnings:(o.manifest?.externalProjects??[]).map(i=>`External project "${i.name}" must be relinked after import.`)})}let e=t.outputPath?P.resolve(t.outputPath):void 0;if(e&&await M__default.pathExists(e))throw new Error(`Workspace import destination already exists: ${e}. Choose a new --output path.`);let r;try{let o=await p$3({archivePathOrUrl:t.archivePathOrUrl,outputPath:e,strict:t.strict,safety:t.safety});r=P.resolve(o.outputPath);let n=bp(t,r);if(!k$1(r))throw new Error("Imported archive did not materialize a valid Workspai workspace.");let s=await Im(r);o.manifest?.portableContract&&await M__default.outputJson(P.join(r,".workspai","workspace.contract.json"),o.manifest.portableContract,{spaces:2});let i=await jp(r,t.projectGrounding??"managed");return ln(n,{workspacePath:r,writtenFiles:[...o.files.map(c=>c.path),...i.writtenFiles].filter((c,p,d)=>d.indexOf(c)===p),warnings:[...i.warnings,...(o.manifest?.externalProjects??[]).map(c=>`External project "${c.name}" must be relinked after import.`),...s.length>0?[`Rebuilt ${s.length} machine-local project workspace link(s).`]:[]],registered:true,verified:true})}catch(o){throw r&&(await e$4(r).catch(()=>{}),await M__default.remove(r).catch(()=>{})),o}}function bp(t,e){return Gt({action:"import-workspace",resourceKind:"workspace",sourceKind:"archive",mode:"hydrate",ownership:"workspace-owned",registration:"workspace",source:t.archivePathOrUrl,destination:e,projectGrounding:t.projectGrounding??"managed"})}function ln(t,e){let r={schemaVersion:tn,status:"passed",plan:t,writtenFiles:[],warnings:[],...e};return a$5(r,np,"Workspace ingestion result"),r}function Cp(t){let e={name:"Add existing software (local project, Git repository, or workspace)",value:"existing"};return t?[{name:"Create a project",value:"project"},e,{name:"Create another workspace (outside the current workspace)\u2026",value:"workspace"}]:[{name:"Create a workspace",value:"workspace"},{name:"Create a project",value:"project"},e]}function Sp(){return {type:"input",name:"source",message:"Local path, Git URL, or Workspai archive:",validate:t=>t.trim().length>0||"A source is required"}}function Ep(t){let e=t.trim(),r=e.startsWith("~/")?P.join(homedir(),e.slice(2)):e;if(/\.(?:workspai|rapidkit)-archive\.zip(?:[?#].*)?$/i.test(r)||!Nt(r)&&/\.zip$/i.test(r))return {kind:"workspace-archive",source:Nt(r)?r:P.resolve(r)};if(Nt(r))return {kind:"git-project",source:r};let n=P.resolve(r);return k$1(n)?{kind:"local-workspace",source:n}:{kind:"local-project",source:n}}var Tm=en,Mm=Qo;function Is(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function Wm(t=process.argv){let e=P.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function gr(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function Dm(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function Fe(t,e){let r=t.indexOf(e);if(r>=0&&r+1<t.length)return t[r+1];let o=t.find(n=>n.startsWith(`${e}=`));if(o)return o.slice(e.length+1)}function Lm(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let r=Number(e);if(!Number.isSafeInteger(r)||r<1||r>16)throw new Error("--max-workers must be an integer between 1 and 16.");return r}function Ds(t){try{return Lm(t.raw)}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"cli.option.max-workers.invalid",message:r,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(a$2.red(`\u274C ${r}`)),process.exit(1);}}async function Qs(t,e){let r=Fe(t,"--port")?.trim(),o=t[3];if(!r||!o||!/^\d+$/.test(r))return;let n=Number.parseInt(r,10);if(n<1||n>65535)return;let s=Fe(t,"--output")||".",i=P.resolve(e,s,o),c=u(i,"project.json").find(d=>I.existsSync(d))??v$1(i,"project.json");if(!await M__default.pathExists(c))return;let p=await M__default.readJson(c);await M__default.writeJson(c,{...p,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function Rp(t){let e=Ee(process.cwd()),r$1=t.trim().toLowerCase();if(!e||!r$1)return true;try{let[o,n]=await Promise.all([p$5(e),o$2(e)]),s=a$4(r$1),i=l$5(r$1),c=r$4(r$1),p=i?"node":c?.runtime??s?.runtime??"python",d=n$3({profile:o,runtime:p,subjectLabel:r$1,mode:n}),h=m$3({profile:o,runtimes:await q$3(e,{additionalRuntimes:[p]}),mode:n}),u=d.ok?h:d;if(u.ok)return true;let f=r(u);if(n==="strict")return console.log(a$2.red(`\u274C Profile violation (strict mode): ${u.message}`)),f&&console.log(a$2.gray(`\u{1F4A1} ${f}`)),false;console.log(a$2.yellow(`\u26A0\uFE0F Profile warning: ${u.message}`)),f&&console.log(a$2.gray(`\u{1F4A1} ${f}`));}catch{}return true}function Zs(){return j$8()}function Ls(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(P.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(P.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=i$4()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function Fm(t){return m$6(P.join(t,".venv"))}async function Gm(t,e){return await je(t,["--version"],e)===0}async function Jm(t,e){return new Promise(r=>{let o=spawn(t,["--version"],{cwd:e,stdio:"ignore",env:Ls()});o.once("error",()=>r(false)),o.once("close",n=>r(n===0));})}async function Kt(t){let e=P.join(t,"go.mod");if(await M__default.pathExists(e))return "go";let r=P.join(t,"pom.xml"),o=P.join(t,"build.gradle"),n=P.join(t,"build.gradle.kts");if(await M__default.pathExists(r)||await M__default.pathExists(o)||await M__default.pathExists(n))return "java";if((await M__default.pathExists(t)?await I.promises.readdir(t,{withFileTypes:true}):[]).some(v=>v.isFile()&&v.name.toLowerCase().endsWith(".sln")))return "dotnet";let i=P.join(t,"src");if(await M__default.pathExists(i)&&(await I.promises.readdir(i,{withFileTypes:true})).some(k=>k.isFile()&&k.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=P.join(t,"Cargo.toml");if(await M__default.pathExists(c))return "rust";let p=P.join(t,"composer.json");if(await M__default.pathExists(p))return "php";let d=P.join(t,"package.json");if(await M__default.pathExists(d))return "node";let h=P.join(t,"pyproject.toml"),u=P.join(t,"requirements.txt"),f=P.join(t,"poetry.lock");return await M__default.pathExists(h)||await M__default.pathExists(u)||await M__default.pathExists(f)?"python":null}async function Vm(t,e={}){let r=e.runCommand??je,o=P.join(t,".venv"),n=await M__default.pathExists(o);for(let s of e.pythonCandidates??Zs()){if(await r(s,s==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;n||await M__default.remove(o);}return 1}async function Km(t,e={}){let r=e.runCommand??je,o=P.join(t,".venv"),n=m$6(o);if(await M__default.pathExists(n)){if(await r(n,["-m","pip","--version"],t)===0)return 0;await M__default.remove(o);}let s=await Vm(t,e);if(s!==0)return s;n=m$6(o);let i=await r(n,["-m","pip","--version"],t);return i!==0&&await M__default.remove(o),i}async function Kp(t,e={}){let r=e.runCommand??je;for(let o of e.pythonCandidates??Zs())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Hm(t,e={}){let r=e.runCommand??je,o=m$6(P.join(t,".venv"));if(!await M__default.pathExists(o)){let d=await Kp(t,e);if(d!==0)return d}let n=process.platform==="win32"?P.join(t,".venv","Scripts","poetry.exe"):P.join(t,".venv","bin","poetry"),s=e.runCommand?await r("poetry",["--version"],t)===0:await Jm("poetry",t),i=await M__default.pathExists(n)?n:s?"poetry":null;if(!i)return 0;let c=await r(i,["config","virtualenvs.in-project","true","--local"],t);if(c!==0)return c;let p=await r(i,["env","use",o],t);return p!==0?p:0}async function Um(t,e={}){let r=e.runCommand??je,o=m$6(P.join(t,".venv"));if(!await M__default.pathExists(o)){let i=await Kp(t,e);if(i!==0)return i}await r(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=P.join(t,"requirements.txt");if(await M__default.pathExists(n)&&await r(o,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let s=P.join(t,"pyproject.toml");return await M__default.pathExists(s)&&(await r(o,["-m","pip","install","-e","."],t)===0||await r(o,["-m","pip","install","."],t)===0)?0:1}async function Os(t,e){return await Hm(t)!==0&&console.log(a$2.yellow("\u26A0\uFE0F Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await M__default.pathExists(P.join(t,".venv"))?0:(console.log(a$2.yellow("\u26A0\uFE0F Python init fallback: installing dependencies directly into project .venv")),await Um(t))}async function Ns(t){let e=await Vt("init",t);if(e===0)return 0;let r=["npm","pnpm","yarn"];for(let o of r){if(!await Gm(o,t))continue;if(await je(o,["install"],t)===0)return console.log(a$2.green(`\u2705 Node init fallback succeeded with ${o} install`)),0}return e}function Bm(t,e){let r=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),o=Fe([...e],"--port");if(o&&!/^\d+$/.test(o.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=Fe([...e],"--java-version"),s=Fe([...e],"--spring-boot-version"),i=Fe([...e],"--springdoc-version"),c=Fe([...e],"--group-id"),p=Fe([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(s&&!r(s.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(i&&!r(i.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(p&&!/^[A-Za-z0-9_.-]+$/.test(p.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=Fe([...e],"--target-framework"),s=Fe([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(s&&!/^[A-Za-z0-9_.]+$/.test(s.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function Ap(t){if(t.includes("--dry-run")||t.includes("--no-workspace")||Hs(process.cwd()))return;let e=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:o}=await import('./create-XYKXS3JB.js');await o(process.cwd(),{skipGit:e,yes:t.includes("--yes")||t.includes("-y"),userConfig:await b()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:r}=await b$1([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},{name:"Create it without workspace management",value:"none"}],default:1}]);if(r==="current"){let{registerWorkspaceAtPath:o}=await import('./create-XYKXS3JB.js');await o(process.cwd(),{skipGit:e,yes:false,userConfig:await b()});}else r==="none"&&t.push("--no-workspace");}async function qm(t){await M__default.ensureDir(t);let e=P.join(t,"lifecycle.lock"),r=Date.now();for(;;)try{let o=await I.promises.open(e,"wx");return await o.writeFile(`${JSON.stringify({pid:process.pid})}
155
+ `),async()=>{await o.close().catch(()=>{}),await M__default.remove(e).catch(()=>{});}}catch(o){if(o.code!=="EEXIST")throw o;let n=await M__default.readJson(e).catch(()=>null),s=Number(n?.pid),i=false;if(Number.isInteger(s)&&s>0)try{process.kill(s,0),i=true;}catch(c){i=c.code==="EPERM";}if(!i){await M__default.remove(e).catch(()=>{});continue}if(Date.now()-r>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function mn(t,e={}){let r=P.join(q$2(),"transactions"),o=await qm(r),n;try{await b$8(r),n=await a$b({journalDirectory:r});}catch(i){throw await o(),i}let s=new Set([P.join(q$2(),"workspaces.json"),P.join(r$1(),"workspaces.json"),a$c(t,g$2),e$5(t,g$2),a$c(t,a$d),e$5(t,a$d),...t$1(t,"imported-projects.json")]);if(e.projectPath){s.add(v$1(e.projectPath,"project.json")),s.add(v$1(e.projectPath,"context.json")),s.add(v$1(e.projectPath,"file-hashes.json")),s.add(v$1(e.projectPath,"adopt.json")),s.add(v$1(e.projectPath,"adopt-readiness.json")),s.add(P.join(e.projectPath,f$1)),s.add(P.join(e.projectPath,g$3)),s.add(P.join(e.projectPath,h$2)),s.add(P.join(e.projectPath,b$9)),s.add(P.join(e.projectPath,i$1));for(let i of g$4)s.add(P.join(e.projectPath,i));for(let i of await j$4({workspacePath:t,projectPath:e.projectPath}))s.add(i);s.add(P.join(e.projectPath,"AGENTS.md")),s.add(P.join(e.projectPath,".gitignore"));}try{let i=new Set,c=e.projectPath;for(let d of s){let u=c&&(d===P.join(c,"AGENTS.md")||g$4.some(v=>d===P.join(c,v)))?await M__default.lstat(d).catch(v=>{if(v.code==="ENOENT")return null;throw v}):null,f=d;if(u?.isSymbolicLink()&&c){let v=await a$e(c,d);if(!v)continue;f=v;}i.has(f)||(await n.captureFile(f),i.add(f));}e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let p=false;return {registerCompensation:d=>n.registerCompensation(d),commit:async()=>{p||(await n.commit(),p=true,await o());},rollback:async()=>{if(!p){p=true;try{await n.rollback();}finally{await o();}}}}}catch(i){throw await n.rollback().catch(()=>{}),await o(),i}}async function fr(t,e){try{await t.rollback();}catch(r){throw new AggregateError([e,r],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function zr(t,e$1,r){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await M__default.pathExists(e$1)){e.warn(`Created project path was not found for workspace linking: ${e$1}`);return}let o=Ee(e$1)||Ee(process.cwd()),n=false,s;if(o)s=await mn(o,{projectPath:e$1});else {o=p$1(),s=await mn(o,{projectPath:e$1,ownedWorkspace:o});try{o=(await ea()).workspacePath;}catch(c){await fr(s,c);}n=true;}let i="managed";try{await p$4(e$1);let c=P.relative(o,e$1);(c.startsWith("..")||P.isAbsolute(c))&&(i=(await xs({source:e$1,workspacePath:o,name:r})).relationship);let{registerProjectInWorkspaceStrict:d,registerWorkspaceStrict:h}=await import('./workspace-ROUEA3RT.js'),{syncWorkspaceContract:u}=await import('./workspace-contract-2V2BI6A3.js');await h(o,P.basename(o)),await d(o,r,e$1),await u({workspacePath:o,strict:true});let{syncProjectIntelligenceLens:f}=await import('./project-intelligence-lens-6Q6XSUDJ.js');await f({workspacePath:o,projectPath:e$1,projectName:r,relationship:i==="adopted"?"adopted":"managed",mode:"managed"}),await Yr(o,{strict:true}),await s.commit();}catch(c){await fr(s,c);}return n&&(console.log(a$2.gray(`\u2139\uFE0F Project created outside a Workspai workspace \u2014 linked to managed workspace "${j$3}" (${i}).`)),console.log(a$2.gray(` Registry: ${P.join(q$2(),"workspaces.json")}`)),console.log(a$2.gray(` Workspace: ${o}`))),o}async function Fs(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],r=a$4(e),o=t[3];if(!r||r.owner!=="npm")return 1;if(!o)return process.stderr.write(`Usage: ${r.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
156
156
  `),1;try{j(o);}catch(u){let f=u instanceof Error?u.message:String(u);return process.stderr.write(`${f}
157
157
  `),1}let n=Bm(r.id,t);if(n)return process.stderr.write(`${n}
158
158
  `),1;let s=Fe(t,"--output")||process.cwd(),i=P.resolve(s,o),c=t.includes("--skip-git")||t.includes("--no-git"),p=t.includes("--skip-install"),d=t.includes("--dry-run"),h=false;try{let{default:u}=await import('fs-extra');return await u.pathExists(i)?(process.stderr.write(`\u274C Directory "${i}" already exists
@@ -266,16 +266,16 @@ Run:
266
266
  `),1;try{j(v);}catch(y){if(y instanceof a$1)return process.stderr.write(`${y.message}
267
267
  `),1;throw y}let k=await j$1(t,{hasYes:n$1}),E=h$1(v.trim(),{argv:t,outputParent:k});c||await M__default.ensureDir(P.dirname(E));let S=n(v.trim());if(!c&&(i(S,E,{outputParent:k})&&S&&await M__default.pathExists(S)||await M__default.pathExists(E)))return process.stderr.write(`\u274C Workspace "${v}" already exists
268
268
  `),S&&S!==E&&process.stderr.write(` Found at: ${S}
269
- `),1;let $=await b(),l=$.author||process.env.USER||"Workspai User";if(!n$1){let y=await b$1([{type:"input",name:"author",message:"Author name:",default:l}]);y.author?.trim()&&(l=y.author.trim());}let{createProject:m}=await import('./create-7CWWGDXQ.js');return await m(v,{skipGit:s,skipPythonEngine:i$1,yes:n$1,dryRun:c,userConfig:{...$,author:l},installMethod:h,profile:f,parentDirectory:P.dirname(E)}),0}catch(n){return n instanceof a$1?(process.stderr.write(`
269
+ `),1;let $=await b(),l=$.author||process.env.USER||"Workspai User";if(!n$1){let y=await b$1([{type:"input",name:"author",message:"Author name:",default:l}]);y.author?.trim()&&(l=y.author.trim());}let{createProject:m}=await import('./create-XYKXS3JB.js');return await m(v,{skipGit:s,skipPythonEngine:i$1,yes:n$1,dryRun:c,userConfig:{...$,author:l},installMethod:h,profile:f,parentDirectory:P.dirname(E)}),0}catch(n){return n instanceof a$1?(process.stderr.write(`
270
270
  \u274C ${n.message}
271
271
  `),n.details&&process.stderr.write(`
272
272
  ${n.details}
273
273
  `),e.debug("Create workspace error",{code:n.code,stack:n.stack})):(process.stderr.write(`Workspai CLI failed to create workspace: ${n?.message??n}
274
274
  `),e.debug("Unexpected create workspace error",n)),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))return Op(),0;if(!t[2]||t[2].startsWith("-")){process.stdin.isTTY&&a("create project");let{kitChoice:v}=await b$1([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:a$L()}]);if(d$1(v)||m$5(v)||s$1(v)){let S=Cs(v),{projectName:$}=await b$1([{type:"input",name:"projectName",message:"Project name:",default:S,validate:w=>w.trim().length>0||"Project name is required"}]),l=t.slice(2).filter(w=>w.startsWith("-")),m=["create","project",v,$.trim(),...l];return await Rp(v)?(await Ap(m),m$5(v)?await _p(m):s$1(v)?await Ip(m):await Fs(m)):1}let k=Cs(v),{projectName:E}=await b$1([{type:"input",name:"projectName",message:"Project name:",default:k,validate:S=>S.trim().length>0||"Project name is required"}]);t.splice(2,0,v,E.trim());}let s=t[2],i=a$M({kitId:s,framework:s,runtime:s});if(b$l(i))return zm(i),1;if(!await Rp(t[2]||""))return 1;if(await Ap(t),d$1(t[2]))return await Fs(t);if(m$5(t[2]))return await _p(t);if(s$1(t[2]))return await Ip(t);if(t.includes("--skip-python-engine")||t.includes("--no-python-engine"))return process.stderr.write("`--skip-python-engine` is a workspace creation option. For projects, use `--skip-install` to scaffold first, then run `npx workspai init` when ready.\n"),1;if(t.includes("--dry-run"))return Qm(t),0;let p=[...t.filter(v=>{let k=v.split("=")[0];return !o.has(v)&&!o.has(k)})],d=Ee(process.cwd()),h=t.includes("--skip-install");h&&!p.includes("--skip-essentials")&&p.push("--skip-essentials");let f=h||!!d?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await d$8();let v=await e$1(p,{cwd:process.cwd(),env:f});if(v===0&&d&&!t.includes("--skip-install")&&(console.log(a$2.gray("\u2139\uFE0F Fast create mode (workspace): dependencies were deferred.")),console.log(a$2.white(" Next: cd <project-name> && npx workspai init"))),v===0){await Qs(t,process.cwd());let k=t[3],E=Fe(t,"--output")||process.cwd(),S=k?P.resolve(E,k):void 0,$=k&&S?await zr(t,S,k).catch(async l=>{throw await M__default.remove(S).catch(()=>{}),l}):d;if($)try{if(k&&S){let l=P.join($,".python-version"),m=P.join(S,".python-version");if(I.existsSync(l)&&I.existsSync(S)){let y=I.readFileSync(l,"utf-8");I.writeFileSync(m,y.trim()+`
275
275
  `),e.debug(`Synced Python version ${y.trim()} from workspace to ${k}`);}}}catch(l){e.debug("Could not sync Python version from workspace:",l);}}return v}catch(v){let k=Is(v);return k?await pn(t,k):(process.stderr.write(`Workspai failed to run the Python core engine: ${v?.message??v}
276
- `),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$8();let n=await e$1(t,{cwd:process.cwd()});if(n===0){let s=Ee(process.cwd());if(s){let{syncWorkspaceProjects:i}=await import('./workspace-E3MM3AIE.js');await i(s,true);}}return n}catch(n){let s=Is(n);return s?await pn(t,s):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
276
+ `),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$8();let n=await e$1(t,{cwd:process.cwd()});if(n===0){let s=Ee(process.cwd());if(s){let{syncWorkspaceProjects:i}=await import('./workspace-ROUEA3RT.js');await i(s,true);}}return n}catch(n){let s=Is(n);return s?await pn(t,s):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
277
277
  `),1)}return await d$8(),await e$1(t,{cwd:process.cwd()})}catch(n){let s=Is(n);return s?await pn(t,s):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
278
- `),1)}}var Np=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],Zm=[...w$1,"autopilot","pipeline","import","adopt","snapshot","live","ai","config","product","infra","shell","commands"],eg=["init"],tg=r$3,$p=[...tg,...s$2];function rg(t){return !!t&&Mm.includes(t)}function Js(t){let e=t[0],r=t[1];return e==="project"&&(r==="--help"||r==="-h"||r==="help")?true:Tm.some(([o,n])=>e!==o?false:r?r===n:true)}function qr(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?Js(t):rg(t[0])||Js(t)}function og(t){return !!t&&Zm.includes(t)}function Tp(t){return og(t[0])||Js(t)}function Mp(t){return !!t&&ks.includes(t)}async function Wp(t,e){switch(t){case "bootstrap":return vg(e);case "setup":return Pg(e);case "cache":return jg(e);case "mirror":return Sg(e);default:{let r=t;throw new Error(`Unreachable npm-only manual command: ${String(r)}`)}}}function ng(t=process.env){let e=t.npm_config_user_agent||"",r=t.npm_execpath||"",o=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(r)||o==="exec"||o==="x"}function Hp(t={}){let e=z(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(a$2.bold("Workspai project command capabilities")),console.log(a$2.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(a$2.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(a$2.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(a$2.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(a$2.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(a$2.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function sg(){return {schemaVersion:sp,cli:"workspai",version:h(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:js,contracts:Hr(),contractCatalog:on()}}function Up(){let t=ql(ge),e=[...t.topLevelCommands],r=[...a$6].filter(i=>!e.includes(i)),o=["init","dev","start","build","test","lint","format","help"],n=[...Vr],s=[...Xo];return {schemaVersion:js,scope:"global",cli:"workspai",version:h(),cwd:process.cwd(),contracts:Hr(),contractCatalog:on(),commands:{npmOwned:e,coreBacked:r,projectScoped:o},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:s},commandMap:Object.fromEntries([...e.map(i=>[i,{command:i,owner:"npm-wrapper",status:"supported",scope:i==="project"?"project-introspection":"workspace"}]),...r.map(i=>[i,{command:i,owner:"python-core",status:"delegated",scope:"core"}]),...o.map(i=>[i,{command:i,owner:"runtime-adapter",status:i==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function ag(t={}){let e=Up();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(zl(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(a$2.bold("Workspai command capabilities")),console.log(a$2.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(a$2.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(a$2.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(a$2.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(a$2.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(a$2.gray("Tip: run `workspai project commands --json` inside a project."));}function Vs(t){return B(t)?(Hp({json:t.includes("--json")||t.includes("--ci")}),true):false}function Ks(t){let e=z(process.cwd());if(!e.projectRoot)return false;let r=A(t,process.cwd());if(!r||r.status!=="unsupported")return false;console.error(a$2.red(C(r,e))),process.exit(1);}function Ze(t){return I.existsSync(P.join(t,".workspai-workspace"))||I.existsSync(P.join(t,".workspai","workspace.json"))||I.existsSync(P.join(t,".rapidkit-workspace"))||I.existsSync(P.join(t,".rapidkit","workspace.json"))}function Bp(t){let e=t;for(;;){let r=u(e,"context.json").find(n=>I.existsSync(n));if(r)return r;let o=P.dirname(e);if(o===e)break;e=o;}return null}function Hs(t){let e=t,r=P.resolve(tmpdir());for(;;){let o=[P.join(e,".workspai-workspace"),P.join(e,".rapidkit-workspace")].find(s=>I.existsSync(s));if(o&&P.resolve(e)!==r)return o;let n=P.dirname(e);if(n===e)break;e=n;}return null}function Ee(t){let e=b$5({startPath:t});return !e||P.resolve(e.workspacePath)===P.resolve(tmpdir())?null:e.workspacePath}function qp(t){try{let r=b$5({startPath:t,strict:true})?.workspacePath??null;return {workspacePath:r&&P.resolve(r)!==P.resolve(tmpdir())?r:null,error:null}}catch(e){if(e instanceof a$3&&e.code==="project.workspace.unlinked")return {workspacePath:null,error:null};if(e instanceof a$3)return {workspacePath:null,error:e};throw e}}async function Yr(t,e){try{let{syncWorkspaceConsumerArtifacts:r}=await import('./workspace-onboarding-RJMTHN7Z.js');return await r(t,{silent:e?.silent})}catch(r){if(e?.strict)throw r;return e?.silent||(console.log(a$2.yellow(`\u26A0\uFE0F Workspace consumer sync skipped: ${r.message}`)),console.log(a$2.gray(" Retry: npx workspai workspace agent-sync --write --refresh-context --preset enterprise"))),null}}async function ig(t,e=process.cwd(),r=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$3(r))return {detected:false};let n=p$2(e,r);for(let s of n){if(!await M__default.pathExists(s))continue;let i=s.toLowerCase();if(i.endsWith("rapidkit.cmd")||i.endsWith("rapidkit.exe"))return {detected:true,candidatePath:s,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function cg(t){let e=t;for(;;){let r=P.join(e,".rapidkit-workspace"),o=P.join(e,".rapidkit","workspace.json");if(!I.existsSync(r)&&I.existsSync(o))return e;let n=P.dirname(e);if(n===e)break;e=n;}return null}var zp={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function lg(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function Ur(t,e){let r=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return r?r[1]==="true":zp[e]}function Dp(t){let e=t??"";return {mode:lg(e),dependency_sharing_mode:Yp(e),rules:{enforce_workspace_marker:Ur(e,"enforce_workspace_marker"),enforce_toolchain_lock:Ur(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:Ur(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:Ur(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:Ur(e,"require_mirror_lock_for_offline")}}}function Lp(t,e,r){let o=`${e}: ${r}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),s=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(s.test(t))return t.replace(s,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`${o}
278
+ `),1)}}var Np=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],Zm=[...w$1,"autopilot","pipeline","import","adopt","snapshot","live","ai","config","product","infra","shell","commands"],eg=["init"],tg=r$3,$p=[...tg,...s$2];function rg(t){return !!t&&Mm.includes(t)}function Js(t){let e=t[0],r=t[1];return e==="project"&&(r==="--help"||r==="-h"||r==="help")?true:Tm.some(([o,n])=>e!==o?false:r?r===n:true)}function qr(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?Js(t):rg(t[0])||Js(t)}function og(t){return !!t&&Zm.includes(t)}function Tp(t){return og(t[0])||Js(t)}function Mp(t){return !!t&&ks.includes(t)}async function Wp(t,e){switch(t){case "bootstrap":return vg(e);case "setup":return Pg(e);case "cache":return jg(e);case "mirror":return Sg(e);default:{let r=t;throw new Error(`Unreachable npm-only manual command: ${String(r)}`)}}}function ng(t=process.env){let e=t.npm_config_user_agent||"",r=t.npm_execpath||"",o=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(r)||o==="exec"||o==="x"}function Hp(t={}){let e=z(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(a$2.bold("Workspai project command capabilities")),console.log(a$2.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(a$2.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(a$2.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(a$2.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(a$2.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(a$2.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function sg(){return {schemaVersion:sp,cli:"workspai",version:h(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:js,contracts:Hr(),contractCatalog:on()}}function Up(){let t=ql(ge),e=[...t.topLevelCommands],r=[...a$6].filter(i=>!e.includes(i)),o=["init","dev","start","build","test","lint","format","help"],n=[...Vr],s=[...Xo];return {schemaVersion:js,scope:"global",cli:"workspai",version:h(),cwd:process.cwd(),contracts:Hr(),contractCatalog:on(),commands:{npmOwned:e,coreBacked:r,projectScoped:o},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:s},commandMap:Object.fromEntries([...e.map(i=>[i,{command:i,owner:"npm-wrapper",status:"supported",scope:i==="project"?"project-introspection":"workspace"}]),...r.map(i=>[i,{command:i,owner:"python-core",status:"delegated",scope:"core"}]),...o.map(i=>[i,{command:i,owner:"runtime-adapter",status:i==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function ag(t={}){let e=Up();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(zl(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(a$2.bold("Workspai command capabilities")),console.log(a$2.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(a$2.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(a$2.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(a$2.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(a$2.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(a$2.gray("Tip: run `workspai project commands --json` inside a project."));}function Vs(t){return B(t)?(Hp({json:t.includes("--json")||t.includes("--ci")}),true):false}function Ks(t){let e=z(process.cwd());if(!e.projectRoot)return false;let r=A(t,process.cwd());if(!r||r.status!=="unsupported")return false;console.error(a$2.red(C(r,e))),process.exit(1);}function Ze(t){return I.existsSync(P.join(t,".workspai-workspace"))||I.existsSync(P.join(t,".workspai","workspace.json"))||I.existsSync(P.join(t,".rapidkit-workspace"))||I.existsSync(P.join(t,".rapidkit","workspace.json"))}function Bp(t){let e=t;for(;;){let r=u(e,"context.json").find(n=>I.existsSync(n));if(r)return r;let o=P.dirname(e);if(o===e)break;e=o;}return null}function Hs(t){let e=t,r=P.resolve(tmpdir());for(;;){let o=[P.join(e,".workspai-workspace"),P.join(e,".rapidkit-workspace")].find(s=>I.existsSync(s));if(o&&P.resolve(e)!==r)return o;let n=P.dirname(e);if(n===e)break;e=n;}return null}function Ee(t){let e=b$5({startPath:t});return !e||P.resolve(e.workspacePath)===P.resolve(tmpdir())?null:e.workspacePath}function qp(t){try{let r=b$5({startPath:t,strict:true})?.workspacePath??null;return {workspacePath:r&&P.resolve(r)!==P.resolve(tmpdir())?r:null,error:null}}catch(e){if(e instanceof a$3&&e.code==="project.workspace.unlinked")return {workspacePath:null,error:null};if(e instanceof a$3)return {workspacePath:null,error:e};throw e}}async function Yr(t,e){try{let{syncWorkspaceConsumerArtifacts:r}=await import('./workspace-onboarding-IRBVZTT4.js');return await r(t,{silent:e?.silent})}catch(r){if(e?.strict)throw r;return e?.silent||(console.log(a$2.yellow(`\u26A0\uFE0F Workspace consumer sync skipped: ${r.message}`)),console.log(a$2.gray(" Retry: npx workspai workspace agent-sync --write --refresh-context --preset enterprise"))),null}}async function ig(t,e=process.cwd(),r=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$3(r))return {detected:false};let n=p$2(e,r);for(let s of n){if(!await M__default.pathExists(s))continue;let i=s.toLowerCase();if(i.endsWith("rapidkit.cmd")||i.endsWith("rapidkit.exe"))return {detected:true,candidatePath:s,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function cg(t){let e=t;for(;;){let r=P.join(e,".rapidkit-workspace"),o=P.join(e,".rapidkit","workspace.json");if(!I.existsSync(r)&&I.existsSync(o))return e;let n=P.dirname(e);if(n===e)break;e=n;}return null}var zp={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function lg(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function Ur(t,e){let r=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return r?r[1]==="true":zp[e]}function Dp(t){let e=t??"";return {mode:lg(e),dependency_sharing_mode:Yp(e),rules:{enforce_workspace_marker:Ur(e,"enforce_workspace_marker"),enforce_toolchain_lock:Ur(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:Ur(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:Ur(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:Ur(e,"require_mirror_lock_for_offline")}}}function Lp(t,e,r){let o=`${e}: ${r}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),s=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(s.test(t))return t.replace(s,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`${o}
279
279
  rules:`):`${t.endsWith(`
280
280
  `)?t:`${t}
281
281
  `}${o}
@@ -296,10 +296,10 @@ ${o}
296
296
  `),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&(R.length>0&&process.stdout.write(R),b.length>0?process.stderr.write(b):T&&process.stderr.write(`${T}
297
297
  `)),S(x??1);}),w.on("error",x=>{m||(m=true,y&&clearTimeout(y),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`Workspai could not execute ${p}: ${x.message}. Install the required runtime or tool and ensure it is available on PATH.
298
298
  `),S(1));});})}function gg(t,e,r){if(t!=="npm")return null;let o=e[0];if(o!=="run"&&o!=="run-script")return null;let n=e.find((i,c)=>c>0&&!i.startsWith("-"));if(!n)return null;let s=P.join(r,"package.json");if(!I.existsSync(s))return null;try{let c=JSON.parse(I.readFileSync(s,"utf8")).scripts?.[n];return typeof c!="string"?null:fg(c)}catch{return null}}function fg(t){let e=t.trim(),r=e.match(/^node\s+(?:-e|--eval)\s+"((?:\\.|[^"\\])*)"$/);if(r)return r[1].replace(/\\"/g,'"').replace(/\\\\/g,"\\");let o=e.match(/^node\s+(?:-e|--eval)\s+'((?:\\.|[^'\\])*)'$/);return o?o[1].replace(/\\'/g,"'").replace(/\\\\/g,"\\"):null}async function gn(t,e){await M__default.outputFile(t,`${JSON.stringify(e,null,2)}
299
- `,"utf-8");}function hg(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function yg(t,e,r){let o=Nt(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":P.basename(e),n=hg(r||o)||"imported-project",s=0;for(;;){let i=s===0?n:s===1?`${n}-imported`:`${n}-imported-${s}`,c=P.join(t,i);if(!await M__default.pathExists(c))return c;s+=1;}}async function Us(t,e,r$1){let o=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?P.resolve(e.workspace):null,s=n?{workspacePath:n,error:null}:qp(process.cwd()),i=s.workspacePath,c=false,p=false,d=false;if(s.error)return e.json?console.log(JSON.stringify(c$1({operation:"import",code:s.error.code,message:s.error.message,context:s.error.context}),null,2)):console.log(a$2.red(`\u274C ${s.error.message}`)),1;if(n){if(!Ze(n)){let f=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:f},null,2)):console.log(a$2.red(`\u274C ${f}`)),1}}else (!i||!Ze(i))&&(i=p$1(),c=true,d=true);if(!i||!Ze(i)&&!d){let f="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:f},null,2)):(console.log(a$2.red(`\u274C ${f}`)),console.log(a$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let h="npx workspai project workspace status --json",u;try{let f=await yg(i,t,e.name);if(u=await mn(i,{ownedDestination:f,ownedWorkspace:d?i:void 0}),d){let k=await ea({silent:e.json});i=k.workspacePath,p=k.created;}let v=await wp({workspacePath:i,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0,projectGrounding:e.projectGrounding});v.path!==f&&u.registerCompensation(()=>M__default.remove(v.path));try{if(r$1?.syncWorkspaceProjects)await r$1.syncWorkspaceProjects(i);else {if(o)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:k,registerWorkspaceStrict:E}=await import('./workspace-E3MM3AIE.js');await E(i,P.basename(i)),await k(i,v.name,v.path);}await u.commit(),await Yr(i,{silent:e.json});}catch(k){try{await fr(u,k);}catch(E){if(E!==k)throw E}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${k instanceof Error?k.message:String(k)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:i,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?p:false,projectWorkspaceCommand:h,commandsResolveWorkspaceFromProject:true,plan:v.ingestionPlan,importedProject:v},null,2)),0;if(c&&console.log(a$2.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${i}`)),p&&console.log(a$2.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),console.log(a$2.green(`\u2714 Imported project: ${v.name}`)),console.log(a$2.gray(` Workspace: ${i}`)),console.log(a$2.gray(` Destination: ${v.path}`)),console.log(a$2.gray(` Stack: ${v.stack} (${v.confidence})`)),console.log(a$2.gray(` Source: ${e.git===true||Nt(t)?"git-url":"local-folder"}`)),!v.profileCompatibility.ok){let k=r(v.profileCompatibility);console.log(a$2.yellow(` Profile warning: ${v.profileCompatibility.message}`)),k&&console.log(a$2.gray(` ${k}`));}return console.log(a$2.gray(" Workspai commands now resolve this workspace directly from the imported project.")),console.log(a$2.gray(` Check: ${h}`)),0}catch(f){if(u)try{await fr(u,f);}catch(k){k!==f&&(f=k);}let v=f instanceof Error?f.message:String(f);return e.json?console.log(JSON.stringify({error:v},null,2)):console.log(a$2.red(`\u274C Import failed: ${v}`)),1}}async function Zp(t,e,r$1){let o,n=(y,w)=>{o=y,c$7({blockId:y,status:"running",message:w,component:"adopt"});},s=(y,w)=>{c$7({blockId:y,status:"succeeded",message:w,component:"adopt"}),o===y&&(o=void 0);},i=(y,w)=>{c$7({blockId:y,status:"skipped",message:w,component:"adopt"});},c=y=>{o&&(c$7({blockId:o,status:"failed",message:y,component:"adopt"}),o=void 0);};n("adopt.resolve","Resolving project and workspace");let p=P.resolve(t||process.cwd()),d=e.workspace?P.resolve(e.workspace):null,h=d?{workspacePath:d,error:null}:qp(process.cwd()),u=h.workspacePath,f=false,v=false,k=false;if(h.error)return c(h.error.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:h.error.code,message:h.error.message,context:h.error.context}),null,2)):console.log(a$2.red(`\u274C ${h.error.message}`)),1;if(d){if(!Ze(d)){let y=`Workspace path is not a valid Workspai workspace: ${d}`;return c(y),e.json?console.log(JSON.stringify({error:y},null,2)):console.log(a$2.red(`\u274C ${y}`)),1}}else (!u||!Ze(u))&&(u=p$1(),f=true,k=e.dryRun!==true);let E=f&&u!==null&&(e.dryRun===true||k);if(!u||!Ze(u)&&!E){let y="Not inside a Workspai workspace";return c(y),e.json?console.log(JSON.stringify({error:y},null,2)):(console.log(a$2.red(`\u274C ${y}`)),console.log(a$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let S=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),$,l=null,m=null;try{if(e.dryRun!==true&&($=await mn(u,{projectPath:p,ownedWorkspace:k?u:void 0}),k)){let b=await ea({silent:e.json});u=b.workspacePath,v=b.created;}s("adopt.resolve","Project and workspace resolved"),n("adopt.detect","Detecting architecture and adoption effects");let y=await Es(u,p),w=await xs({workspacePath:u,source:p,name:e.name,dryRun:e.dryRun===true,projectGrounding:e.projectGrounding,rollbackSnapshot:y});s("adopt.detect","Architecture and adoption effects detected");let g="npx workspai project workspace status --json",C=e.dryRun===true?b$5({startPath:p}):null,x=e.dryRun!==true||C!==null&&P.resolve(C.workspacePath)===P.resolve(u)&&(!C.projectPath||P.resolve(C.projectPath)===p);if(e.dryRun!==true){n("adopt.link","Linking project to workspace");try{if(r$1?.registerWorkspace||r$1?.registerProjectInWorkspace||r$1?.syncWorkspaceProjects)r$1.registerWorkspace&&await r$1.registerWorkspace(u,P.basename(u)),r$1.registerProjectInWorkspace&&await r$1.registerProjectInWorkspace(u,w.name,w.path),r$1.syncWorkspaceProjects&&await r$1.syncWorkspaceProjects(u);else {let{registerProjectInWorkspaceStrict:T,registerWorkspaceStrict:j}=await import('./workspace-E3MM3AIE.js');if(await j(u,P.basename(u)),await T(u,w.name,w.path),S)throw new Error("forced sync failure for command-level adopt rollback test")}if(s("adopt.link","Project linked to workspace"),n("adopt.publish","Sealing workspace intelligence"),l=await Yr(u,{silent:e.json,strict:true}),!l?.freshnessSealed)throw new Error("Workspace consumer artifacts were generated without a freshness seal.");s("adopt.publish","Workspace intelligence freshness sealed"),n("adopt.ground","Building the project agent entry");let{buildAgentBootstrapReceipt:b}=await import('./project-agent-entry-HEBGPLMX.js');if(m=await b({startPath:p,forAgent:"generic",validateLiveInputs:true}),m.status==="blocked")throw new Error("Adopted project did not produce a usable agent-grounding route; inspect the bootstrap checks.");await $?.commit(),s("adopt.ground","Project agent entry is ready");}catch(b){if($)try{await fr($,b);}catch(T){if(T!==b)throw T}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${b instanceof Error?b.message:String(b)}`)}}else i("adopt.link","Dry run: workspace link not written"),i("adopt.publish","Dry run: workspace intelligence not published"),i("adopt.ground","Dry run: project agent entry not written");if(e.json)return console.log(JSON.stringify({workspacePath:u,workspaceResolution:f?"default-auto":d?"explicit":"nearest",defaultWorkspaceCreated:f?v:false,wouldCreateDefaultWorkspace:f&&e.dryRun===true?!Ze(u):false,projectWorkspaceCommand:g,commandsResolveWorkspaceFromProject:x,dryRun:e.dryRun===true,plan:w.ingestionPlan,adoptedProject:w,consumerArtifacts:e.dryRun===true||!l?null:{freshnessSealed:l.freshnessSealed,reconciledAfterGrounding:l.reconciledAfterGrounding,warnings:l.warnings},agentBootstrap:m},null,2)),0;f&&console.log(a$2.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${u}`)),v&&e.dryRun!==true&&console.log(a$2.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),e.dryRun===true&&(console.log(a$2.yellow("\u2139 Dry run: no adoption files were written.")),console.log(a$2.gray(" Planned effects: project metadata + workspace registration + model, graph, and agent-grounding sync.")),w.effects.repositoryControlFiles.length>0&&console.log(a$2.gray(` Repository controls may be reconciled: ${w.effects.repositoryControlFiles.map(b=>b.path).join(", ")}.`))),console.log(a$2.green(`\u2714 Adopted project: ${w.name}`)),console.log(a$2.gray(` Workspace: ${u}`)),console.log(a$2.gray(` Project: ${w.path}`)),console.log(a$2.gray(" Mode: linked (source was not moved or copied)"));let R=w.stack==="unknown"?w.frameworkDisplayName||w.runtime:w.stack;if(console.log(a$2.gray(` Stack: ${R} (${w.confidence})`)),!w.profileCompatibility.ok){let b=r(w.profileCompatibility);console.log(a$2.yellow(` Profile warning: ${w.profileCompatibility.message}`)),b&&console.log(a$2.gray(` ${b}`));}return console.log(a$2.gray(` Report: ${w.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(a$2.gray(" Workspai commands now resolve this workspace directly from the project.")),console.log(a$2.gray(` Consumer evidence: ${l?.freshnessSealed?"freshness sealed":"not sealed"}${l?.reconciledAfterGrounding?" after grounding reconciliation":""}.`)),console.log(a$2.gray(` Agent grounding: ${m?.status??"unknown"}; project environment: ${m?.readiness.projectEnvironment??"unknown"}; release: ${m?.readiness.release??"not-verified"}.`)),console.log(a$2.gray(` Check: ${g}`)),console.log(a$2.gray(" Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(y){if($)try{await fr($,y);}catch(g){g!==y&&(y=g);}let w=y instanceof Error?y.message:String(y);return c(w),e.json?console.log(JSON.stringify({error:w},null,2)):console.log(a$2.red(`\u274C Adopt failed: ${w}`)),1}}async function Bs(t){let e=new Set(["python-only","polyglot","enterprise"]),r=wg(),o="minimal",n=false;try{let p=t$1(t,"workspace.json").find(h=>I.existsSync(h))??q$1(t,"workspace.json"),d=JSON.parse(await I.promises.readFile(p,"utf-8"));o=d.profile??"minimal",n=d.bootstrap_note==="python-engine-skipped"||d.engine?.python_core?.status==="skipped";}catch{o="minimal";}if(!await(async()=>{if(l(o)&&o!=="minimal")return false;if(!n&&e.has(o))return true;let p=await qs(t);if(p.length===0)return false;for(let d of p){let h=j$2(d),u=h?.module_support,f=typeof h?.kit_name=="string"?h.kit_name:typeof h?.kit=="string"?h.kit:void 0,v=f?a$4(f):null;if(n||o==="minimal"){if(v?.workspacePythonEngine==="required")return true;continue}if(!(k$2(h,d)||m$1(h,d)||n$2(h,d))&&u!==false)return o$1(h,d)||l$1(h,d),true}return false})())return 0;let i="poetry";try{let{readWorkspaceMarker:p}=await import('./workspace-marker-XGAWZZDX.js'),h=(await p(t))?.metadata?.npm?.installMethod;(h==="poetry"||h==="venv"||h==="pipx"||h==="pip")&&(i=h);}catch{}let c=async()=>{let p=Fm(t),d=await Km(t);if(d!==0)return d;let h=f$2("DEV_PATH"),f=(h?await M__default.pathExists(h):false)&&h?["-m","pip","install",h,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await je(p,f,t,{timeoutMs:r})};if(i==="venv"){let p=await c();if(p!==0)return p}else if(i==="poetry"){let p=P.join(t,"pyproject.toml"),d=false;try{d=(await I.promises.readFile(p,"utf-8")).includes("rapidkit-core");}catch{d=false;}if(d){let h=await c();if(h!==0)return h}else {let h=await je("poetry",["install","--no-root"],t,{timeoutMs:r});if(h!==0)return h;let u=await je("poetry",["add","rapidkit-core"],t,{timeoutMs:r});if(u!==0)return u}}else return 0;try{let{writeWorkspaceLauncher:p}=await import('./create-7CWWGDXQ.js');await p(t,i==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:p}=await import('./workspace-python-engine-state-BE4A3BL5.js');await p(t,{installMethod:i==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function wg(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function qs(t){let e=[],r=new Set,o=[t];for(;o.length>0;){let n=o.pop();if(!n||r.has(n))continue;r.add(n);let s=[];try{s=await I.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let i of s){if(!i.isDirectory()||i.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(i.name))continue;let c=P.join(n,i.name);if((await Promise.all([...u(c,"context.json"),...u(c,"project.json")].map(d=>M__default.pathExists(d)))).some(Boolean)){e.push(c);continue}o.push(c);}}return e}function kg(t){return o$5(t)}async function ea(t={}){let e=p$1(),r=P.basename(e),o=Ze(e);if(!o){let{createProject:n}=await import('./create-7CWWGDXQ.js'),s=process.env.WORKSPAI_LOG_FORMAT,i=console.log,c=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(r,{parentDirectory:P.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await b(),suppressReceipt:true});}finally{t.silent&&(console.log=i,console.warn=c,s===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=s);}}return {workspacePath:e,created:!o}}async function $s(t){let r=await Be("go",{runCommandInCwd:je,runCoreRapidkit:e$1}).initProject(t);return ae(r)}function ae(t){return t.message&&console.log(a$2.red(`\u274C ${t.message}`)),t.exitCode}async function Vt(t,e){let r=Be("node",{runCommandInCwd:je,runCoreRapidkit:e$1});if(t==="init"){let n=await r.initProject(e);return ae(n)}if(t==="dev"){let n=await r.runDev(e);return ae(n)}if(t==="test"){let n=await r.runTest(e);return ae(n)}if(t==="build"){let n=await r.runBuild(e);return ae(n)}if(t==="lint"){let n=await r.runLint?.(e);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ae(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ae(o)}async function bt(t,e){let r=Be("java",{runCommandInCwd:je,runCoreRapidkit:e$1});if(t==="init"){let n=await r.initProject(e);return ae(n)}if(t==="dev"){let n=await r.runDev(e);return ae(n)}if(t==="test"){let n=await r.runTest(e);return ae(n)}if(t==="build"){let n=await r.runBuild(e);return ae(n)}if(t==="lint"){let n=await r.runLint?.(e);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ae(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ae(o)}function Ts(t,e,r){let o=r.filter(n=>n.status==="failed").map(n=>{let s=n.id||"check";return n.message?`${s}: ${n.message}`:s}).slice(0,12);return f$6(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:o,runId:e$c()})}async function vg(t$2,e=zs){if(t$2.includes("--help")||t$2.includes("-h")||t$2.includes("help"))return console.log(a$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let r=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof r>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let s$1=function(_){if(!_)return null;let V=_.trim().toLowerCase();return V==="minimal"||V==="java-only"||V==="go-only"||V==="dotnet-only"||V==="python-only"||V==="node-only"||V==="polyglot"||V==="enterprise"?V:null},i=function(_){let Ie=_.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Oe=(Ce,qe)=>{let at=_.match(new RegExp(`^\\s*${Ce}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return at?at[1].toLowerCase()==="true":qe};return {mode:Ie,dependency_sharing_mode:Yp(_),rules:{enforce_workspace_marker:Oe("enforce_workspace_marker",true),enforce_toolchain_lock:Oe("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Oe("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Oe("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Oe("require_mirror_lock_for_offline",true)}}};let c=["init"],p,d=false,h=false,u=false,f=false;for(let _=1;_<t$2.length;_+=1){let V=t$2[_];if(V==="--ci"){d=true;continue}if(V==="--offline"){h=true;continue}if(V==="--json"){u=true;continue}if(V==="--compliance-only"){f=true;continue}if(V==="--profile"){let K=t$2[_+1];if(!K||K.startsWith("-"))return console.log(a$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;p=K,_+=1;continue}if(V.startsWith("--profile=")){p=V.slice(10);continue}c.push(V);}let v=s$1(p);if(p&&!v)return console.log(a$2.red(`Invalid profile: ${p}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let k=process.cwd(),E=c.slice(1).filter(_=>!_.startsWith("-"));if(E.length>0){let _=P.resolve(k,E[0]),V=j$2(_),K=I.existsSync(_)?await Kt(_):"unknown";if(!Ze(_)&&(k$2(V,_)||m$1(V,_)||n$2(V,_)||l$1(V,_)||o$1(V,_)||K!=="unknown"))return await e(c)}let S=P.join(k,".rapidkit-workspace"),$=P.join(k,".rapidkit","workspace.json"),l;!I.existsSync(S)&&I.existsSync($)?l=k:(l=Ee(k),l||(l=cg(k)));let m=[],y=null,w=null;if(l)try{let _=t$1(l,"workspace.json").find(Ie=>I.existsSync(Ie))??q$1(l,"workspace.json"),V=await I.promises.readFile(_,"utf-8"),K=JSON.parse(V);w=s$1(K.profile);}catch{w=null;}let g=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],C={minimal:"minimal \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise \u2014 Polyglot + governance + Sigstore verification"},x=v;if(!!l&&!v&&!d&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let _=w||"minimal",{chosenProfile:V}=await b$1([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${_})`,choices:g.map(K=>({name:K===_?`${C[K]} \u2190 current`:C[K],value:K})),default:g.indexOf(_)}]);x=V;}let b=x||w||"minimal";if(l&&!f)try{let V=b==="python-only"||b==="polyglot"||b==="enterprise"?"poetry":"venv",K;try{let qe=(await I.promises.readFile(P.join(l,".python-version"),"utf-8")).trim();qe&&(K=qe);}catch{}let{syncWorkspaceFoundationFiles:Ie}=await import('./create-7CWWGDXQ.js'),Oe=await Ie(l,{workspaceName:P.basename(l),installMethod:V,pythonVersion:K,profile:b,writeMarker:true,writeGitignore:true,onlyIfMissing:true});m.push({id:"workspace.foundation.sync",status:Oe.length>0?"passed":"skipped",message:Oe.length>0?`Workspace foundation synchronized: ${Oe.join(", ")}`:"Workspace foundation files are already up to date."});}catch(_){m.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${_.message}`});}else l&&m.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(l&&!f&&x)try{let _=q$1(l,"workspace.json"),V=await I.promises.readFile(_,"utf-8"),K=JSON.parse(V);if(K.profile=x,k$6.has(x)){delete K.bootstrap_note;let Oe=K.engine&&typeof K.engine=="object"?K.engine:void 0;Oe&&delete Oe.python_core;}await M__default.ensureDir(P.dirname(_)),await I.promises.writeFile(_,JSON.stringify(K,null,2)+`
300
- `,"utf-8");let{syncWorkspaceContract:Ie}=await import('./workspace-contract-E7GVWM7W.js');await Ie({workspacePath:l}),m.push({id:"workspace.profile.sync",status:"passed",message:`Workspace profile synchronized to ${x} across canonical artifacts.`});}catch(_){m.push({id:"workspace.profile.sync",status:"failed",message:`Failed to synchronize workspace profile across canonical artifacts: ${_ instanceof Error?_.message:String(_)}`});}let T={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},j=null;if(l)try{let _=t$1(l,"policies.yml").find(K=>I.existsSync(K));if(!_)throw new Error("policy file missing");let V=await I.promises.readFile(_,"utf-8");j=V,T=i(V);}catch{m.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else m.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(l){let _=Xp(j);T.dependency_sharing_mode=_.mode,m.push({id:"policy.schema.dependency_sharing_mode",status:_.status,message:_.message}),m.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:T.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":T.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let V=I.existsSync(P.join(l,".workspai-workspace"))||I.existsSync(P.join(l,".rapidkit-workspace"));m.push({id:"policy.enforce_workspace_marker",status:!T.rules.enforce_workspace_marker||V?"passed":"failed",message:!T.rules.enforce_workspace_marker||V?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let K=t$1(l,"toolchain.lock").some(Ne=>I.existsSync(Ne));m.push({id:"policy.enforce_toolchain_lock",status:!T.rules.enforce_toolchain_lock||K?"passed":"failed",message:!T.rules.enforce_toolchain_lock||K?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Ie=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||t$1(l,"trusted-sources.lock").some(Ne=>I.existsSync(Ne));m.push({id:"policy.disallow_untrusted_tool_sources",status:!T.rules.disallow_untrusted_tool_sources||Ie?"passed":"failed",message:!T.rules.disallow_untrusted_tool_sources||Ie?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let Oe=t$1(l,"compatibility-matrix.json").find(Ne=>I.existsSync(Ne))??q$1(l,"compatibility-matrix.json"),Ce=I.existsSync(Oe),qe=T.rules.enforce_compatibility_matrix;if(m.push({id:"policy.enforce_compatibility_matrix",status:!qe||Ce?"passed":"failed",message:!qe||Ce?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),Ce)try{let Ne=await I.promises.readFile(Oe,"utf-8"),vt=JSON.parse(Ne),ra=!!vt&&typeof vt=="object";m.push({id:"compatibility.matrix.parse",status:ra?"passed":"failed",message:ra?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{m.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let at=t$1(l,"mirror-config.json").find(Ne=>I.existsSync(Ne))??q$1(l,"mirror-config.json"),hr=t$1(l,"mirror.lock").find(Ne=>I.existsSync(Ne))??q$1(l,"mirror.lock"),hn=I.existsSync(at),yn=I.existsSync(hr),ta={};if(hn)try{ta=JSON.parse(await I.promises.readFile(at,"utf-8")),m.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{m.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(f)m.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let Ne=await Ss(l,{ciMode:d,offlineMode:h});m.push(...Ne.checks.map(vt=>({id:vt.id,status:vt.status,message:vt.message}))),y=Ne.details,Ne.details.lockWritten&&(yn=true);}if(h){let Ne=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||ta.enabled===true;m.push({id:"offline.mirror.enabled",status:Ne?"passed":"failed",message:Ne?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let vt=T.rules.require_mirror_lock_for_offline;m.push({id:"offline.mirror.lock",status:!vt||yn?"passed":"failed",message:!vt||yn?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else m.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Xr=m$3({profile:b,runtimes:await q$3(l),mode:T.mode});Xr.profile!=="enterprise"?m.push({id:Xr.checkId,status:Xr.status,message:Xr.message}):(m.push({id:"profile.enterprise.ci",status:d?"passed":f?"skipped":"failed",message:d?"enterprise profile running with --ci.":f?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),m.push({id:"profile.enterprise.compatibility-matrix",status:Ce?"passed":"failed",message:Ce?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),m.push({id:"profile.enterprise.mirror-config",status:hn?"passed":"failed",message:hn?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}d&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),h&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let O=m.some(_=>_.id.startsWith("policy.schema.")&&_.status==="failed")||T.mode==="strict"&&m.some(_=>_.status==="failed"),F=q$1(l||k,"reports"),U=new Date().toISOString().replace(/[:.]/g,"-"),H=P.join(F,`bootstrap-compliance-${U}.json`),ie=P.join(F,"bootstrap-compliance.latest.json"),oe={schemaVersion:s.bootstrapCompliance.schemaVersion,command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:l,profile:b,options:{ci:d,offline:h,strict:T.mode==="strict",complianceOnly:f},policyMode:T.mode,policyRules:T.rules,mirrorLifecycle:y,checks:m},he=async _=>{b$n(`.workspai/reports/${P.basename(H)}`,_),b$n(t.bootstrapCompliance,_),await M__default.ensureDir(F),await gn(H,_),await gn(ie,_);};if(O){let _=Ts({...oe,result:"blocked",initExitCode:null},1,m);return await he(_),u?process.stdout.write(`${JSON.stringify(_,null,2)}
299
+ `,"utf-8");}function hg(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function yg(t,e,r){let o=Nt(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":P.basename(e),n=hg(r||o)||"imported-project",s=0;for(;;){let i=s===0?n:s===1?`${n}-imported`:`${n}-imported-${s}`,c=P.join(t,i);if(!await M__default.pathExists(c))return c;s+=1;}}async function Us(t,e,r$1){let o=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?P.resolve(e.workspace):null,s=n?{workspacePath:n,error:null}:qp(process.cwd()),i=s.workspacePath,c=false,p=false,d=false;if(s.error)return e.json?console.log(JSON.stringify(c$1({operation:"import",code:s.error.code,message:s.error.message,context:s.error.context}),null,2)):console.log(a$2.red(`\u274C ${s.error.message}`)),1;if(n){if(!Ze(n)){let f=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:f},null,2)):console.log(a$2.red(`\u274C ${f}`)),1}}else (!i||!Ze(i))&&(i=p$1(),c=true,d=true);if(!i||!Ze(i)&&!d){let f="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:f},null,2)):(console.log(a$2.red(`\u274C ${f}`)),console.log(a$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let h="npx workspai project workspace status --json",u;try{let f=await yg(i,t,e.name);if(u=await mn(i,{ownedDestination:f,ownedWorkspace:d?i:void 0}),d){let k=await ea({silent:e.json});i=k.workspacePath,p=k.created;}let v=await wp({workspacePath:i,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0,projectGrounding:e.projectGrounding});v.path!==f&&u.registerCompensation(()=>M__default.remove(v.path));try{if(r$1?.syncWorkspaceProjects)await r$1.syncWorkspaceProjects(i);else {if(o)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:k,registerWorkspaceStrict:E}=await import('./workspace-ROUEA3RT.js');await E(i,P.basename(i)),await k(i,v.name,v.path);}await u.commit(),await Yr(i,{silent:e.json});}catch(k){try{await fr(u,k);}catch(E){if(E!==k)throw E}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${k instanceof Error?k.message:String(k)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:i,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?p:false,projectWorkspaceCommand:h,commandsResolveWorkspaceFromProject:true,plan:v.ingestionPlan,importedProject:v},null,2)),0;if(c&&console.log(a$2.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${i}`)),p&&console.log(a$2.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),console.log(a$2.green(`\u2714 Imported project: ${v.name}`)),console.log(a$2.gray(` Workspace: ${i}`)),console.log(a$2.gray(` Destination: ${v.path}`)),console.log(a$2.gray(` Stack: ${v.stack} (${v.confidence})`)),console.log(a$2.gray(` Source: ${e.git===true||Nt(t)?"git-url":"local-folder"}`)),!v.profileCompatibility.ok){let k=r(v.profileCompatibility);console.log(a$2.yellow(` Profile warning: ${v.profileCompatibility.message}`)),k&&console.log(a$2.gray(` ${k}`));}return console.log(a$2.gray(" Workspai commands now resolve this workspace directly from the imported project.")),console.log(a$2.gray(` Check: ${h}`)),0}catch(f){if(u)try{await fr(u,f);}catch(k){k!==f&&(f=k);}let v=f instanceof Error?f.message:String(f);return e.json?console.log(JSON.stringify({error:v},null,2)):console.log(a$2.red(`\u274C Import failed: ${v}`)),1}}async function Zp(t,e,r$1){let o,n=(y,w)=>{o=y,c$7({blockId:y,status:"running",message:w,component:"adopt"});},s=(y,w)=>{c$7({blockId:y,status:"succeeded",message:w,component:"adopt"}),o===y&&(o=void 0);},i=(y,w)=>{c$7({blockId:y,status:"skipped",message:w,component:"adopt"});},c=y=>{o&&(c$7({blockId:o,status:"failed",message:y,component:"adopt"}),o=void 0);};n("adopt.resolve","Resolving project and workspace");let p=P.resolve(t||process.cwd()),d=e.workspace?P.resolve(e.workspace):null,h=d?{workspacePath:d,error:null}:qp(process.cwd()),u=h.workspacePath,f=false,v=false,k=false;if(h.error)return c(h.error.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:h.error.code,message:h.error.message,context:h.error.context}),null,2)):console.log(a$2.red(`\u274C ${h.error.message}`)),1;if(d){if(!Ze(d)){let y=`Workspace path is not a valid Workspai workspace: ${d}`;return c(y),e.json?console.log(JSON.stringify({error:y},null,2)):console.log(a$2.red(`\u274C ${y}`)),1}}else (!u||!Ze(u))&&(u=p$1(),f=true,k=e.dryRun!==true);let E=f&&u!==null&&(e.dryRun===true||k);if(!u||!Ze(u)&&!E){let y="Not inside a Workspai workspace";return c(y),e.json?console.log(JSON.stringify({error:y},null,2)):(console.log(a$2.red(`\u274C ${y}`)),console.log(a$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let S=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),$,l=null,m=null;try{if(e.dryRun!==true&&($=await mn(u,{projectPath:p,ownedWorkspace:k?u:void 0}),k)){let b=await ea({silent:e.json});u=b.workspacePath,v=b.created;}s("adopt.resolve","Project and workspace resolved"),n("adopt.detect","Detecting architecture and adoption effects");let y=await Es(u,p),w=await xs({workspacePath:u,source:p,name:e.name,dryRun:e.dryRun===true,projectGrounding:e.projectGrounding,rollbackSnapshot:y});s("adopt.detect","Architecture and adoption effects detected");let g="npx workspai project workspace status --json",C=e.dryRun===true?b$5({startPath:p}):null,x=e.dryRun!==true||C!==null&&P.resolve(C.workspacePath)===P.resolve(u)&&(!C.projectPath||P.resolve(C.projectPath)===p);if(e.dryRun!==true){n("adopt.link","Linking project to workspace");try{if(r$1?.registerWorkspace||r$1?.registerProjectInWorkspace||r$1?.syncWorkspaceProjects)r$1.registerWorkspace&&await r$1.registerWorkspace(u,P.basename(u)),r$1.registerProjectInWorkspace&&await r$1.registerProjectInWorkspace(u,w.name,w.path),r$1.syncWorkspaceProjects&&await r$1.syncWorkspaceProjects(u);else {let{registerProjectInWorkspaceStrict:T,registerWorkspaceStrict:j}=await import('./workspace-ROUEA3RT.js');if(await j(u,P.basename(u)),await T(u,w.name,w.path),S)throw new Error("forced sync failure for command-level adopt rollback test")}if(s("adopt.link","Project linked to workspace"),n("adopt.publish","Sealing workspace intelligence"),l=await Yr(u,{silent:e.json,strict:true}),!l?.freshnessSealed)throw new Error("Workspace consumer artifacts were generated without a freshness seal.");s("adopt.publish","Workspace intelligence freshness sealed"),n("adopt.ground","Building the project agent entry");let{buildAgentBootstrapReceipt:b}=await import('./project-agent-entry-Y3NEHZED.js');if(m=await b({startPath:p,forAgent:"generic",validateLiveInputs:true}),m.status==="blocked")throw new Error("Adopted project did not produce a usable agent-grounding route; inspect the bootstrap checks.");await $?.commit(),s("adopt.ground","Project agent entry is ready");}catch(b){if($)try{await fr($,b);}catch(T){if(T!==b)throw T}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${b instanceof Error?b.message:String(b)}`)}}else i("adopt.link","Dry run: workspace link not written"),i("adopt.publish","Dry run: workspace intelligence not published"),i("adopt.ground","Dry run: project agent entry not written");if(e.json)return console.log(JSON.stringify({workspacePath:u,workspaceResolution:f?"default-auto":d?"explicit":"nearest",defaultWorkspaceCreated:f?v:false,wouldCreateDefaultWorkspace:f&&e.dryRun===true?!Ze(u):false,projectWorkspaceCommand:g,commandsResolveWorkspaceFromProject:x,dryRun:e.dryRun===true,plan:w.ingestionPlan,adoptedProject:w,consumerArtifacts:e.dryRun===true||!l?null:{freshnessSealed:l.freshnessSealed,reconciledAfterGrounding:l.reconciledAfterGrounding,warnings:l.warnings},agentBootstrap:m},null,2)),0;f&&console.log(a$2.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${u}`)),v&&e.dryRun!==true&&console.log(a$2.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),e.dryRun===true&&(console.log(a$2.yellow("\u2139 Dry run: no adoption files were written.")),console.log(a$2.gray(" Planned effects: project metadata + workspace registration + model, graph, and agent-grounding sync.")),w.effects.repositoryControlFiles.length>0&&console.log(a$2.gray(` Repository controls may be reconciled: ${w.effects.repositoryControlFiles.map(b=>b.path).join(", ")}.`))),console.log(a$2.green(`\u2714 Adopted project: ${w.name}`)),console.log(a$2.gray(` Workspace: ${u}`)),console.log(a$2.gray(` Project: ${w.path}`)),console.log(a$2.gray(" Mode: linked (source was not moved or copied)"));let R=w.stack==="unknown"?w.frameworkDisplayName||w.runtime:w.stack;if(console.log(a$2.gray(` Stack: ${R} (${w.confidence})`)),!w.profileCompatibility.ok){let b=r(w.profileCompatibility);console.log(a$2.yellow(` Profile warning: ${w.profileCompatibility.message}`)),b&&console.log(a$2.gray(` ${b}`));}return console.log(a$2.gray(` Report: ${w.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(a$2.gray(" Workspai commands now resolve this workspace directly from the project.")),console.log(a$2.gray(` Consumer evidence: ${l?.freshnessSealed?"freshness sealed":"not sealed"}${l?.reconciledAfterGrounding?" after grounding reconciliation":""}.`)),console.log(a$2.gray(` Agent grounding: ${m?.status??"unknown"}; project environment: ${m?.readiness.projectEnvironment??"unknown"}; release: ${m?.readiness.release??"not-verified"}.`)),console.log(a$2.gray(` Check: ${g}`)),console.log(a$2.gray(" Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(y){if($)try{await fr($,y);}catch(g){g!==y&&(y=g);}let w=y instanceof Error?y.message:String(y);return c(w),e.json?console.log(JSON.stringify({error:w},null,2)):console.log(a$2.red(`\u274C Adopt failed: ${w}`)),1}}async function Bs(t){let e=new Set(["python-only","polyglot","enterprise"]),r=wg(),o="minimal",n=false;try{let p=t$1(t,"workspace.json").find(h=>I.existsSync(h))??q$1(t,"workspace.json"),d=JSON.parse(await I.promises.readFile(p,"utf-8"));o=d.profile??"minimal",n=d.bootstrap_note==="python-engine-skipped"||d.engine?.python_core?.status==="skipped";}catch{o="minimal";}if(!await(async()=>{if(l(o)&&o!=="minimal")return false;if(!n&&e.has(o))return true;let p=await qs(t);if(p.length===0)return false;for(let d of p){let h=j$2(d),u=h?.module_support,f=typeof h?.kit_name=="string"?h.kit_name:typeof h?.kit=="string"?h.kit:void 0,v=f?a$4(f):null;if(n||o==="minimal"){if(v?.workspacePythonEngine==="required")return true;continue}if(!(k$2(h,d)||m$1(h,d)||n$2(h,d))&&u!==false)return o$1(h,d)||l$1(h,d),true}return false})())return 0;let i="poetry";try{let{readWorkspaceMarker:p}=await import('./workspace-marker-XGAWZZDX.js'),h=(await p(t))?.metadata?.npm?.installMethod;(h==="poetry"||h==="venv"||h==="pipx"||h==="pip")&&(i=h);}catch{}let c=async()=>{let p=Fm(t),d=await Km(t);if(d!==0)return d;let h=f$2("DEV_PATH"),f=(h?await M__default.pathExists(h):false)&&h?["-m","pip","install",h,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await je(p,f,t,{timeoutMs:r})};if(i==="venv"){let p=await c();if(p!==0)return p}else if(i==="poetry"){let p=P.join(t,"pyproject.toml"),d=false;try{d=(await I.promises.readFile(p,"utf-8")).includes("rapidkit-core");}catch{d=false;}if(d){let h=await c();if(h!==0)return h}else {let h=await je("poetry",["install","--no-root"],t,{timeoutMs:r});if(h!==0)return h;let u=await je("poetry",["add","rapidkit-core"],t,{timeoutMs:r});if(u!==0)return u}}else return 0;try{let{writeWorkspaceLauncher:p}=await import('./create-XYKXS3JB.js');await p(t,i==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:p}=await import('./workspace-python-engine-state-BE4A3BL5.js');await p(t,{installMethod:i==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function wg(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function qs(t){let e=[],r=new Set,o=[t];for(;o.length>0;){let n=o.pop();if(!n||r.has(n))continue;r.add(n);let s=[];try{s=await I.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let i of s){if(!i.isDirectory()||i.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(i.name))continue;let c=P.join(n,i.name);if((await Promise.all([...u(c,"context.json"),...u(c,"project.json")].map(d=>M__default.pathExists(d)))).some(Boolean)){e.push(c);continue}o.push(c);}}return e}function kg(t){return o$5(t)}async function ea(t={}){let e=p$1(),r=P.basename(e),o=Ze(e);if(!o){let{createProject:n}=await import('./create-XYKXS3JB.js'),s=process.env.WORKSPAI_LOG_FORMAT,i=console.log,c=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(r,{parentDirectory:P.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await b(),suppressReceipt:true});}finally{t.silent&&(console.log=i,console.warn=c,s===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=s);}}return {workspacePath:e,created:!o}}async function $s(t){let r=await Be("go",{runCommandInCwd:je,runCoreRapidkit:e$1}).initProject(t);return ae(r)}function ae(t){return t.message&&console.log(a$2.red(`\u274C ${t.message}`)),t.exitCode}async function Vt(t,e){let r=Be("node",{runCommandInCwd:je,runCoreRapidkit:e$1});if(t==="init"){let n=await r.initProject(e);return ae(n)}if(t==="dev"){let n=await r.runDev(e);return ae(n)}if(t==="test"){let n=await r.runTest(e);return ae(n)}if(t==="build"){let n=await r.runBuild(e);return ae(n)}if(t==="lint"){let n=await r.runLint?.(e);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ae(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ae(o)}async function bt(t,e){let r=Be("java",{runCommandInCwd:je,runCoreRapidkit:e$1});if(t==="init"){let n=await r.initProject(e);return ae(n)}if(t==="dev"){let n=await r.runDev(e);return ae(n)}if(t==="test"){let n=await r.runTest(e);return ae(n)}if(t==="build"){let n=await r.runBuild(e);return ae(n)}if(t==="lint"){let n=await r.runLint?.(e);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ae(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ae(o)}function Ts(t,e,r){let o=r.filter(n=>n.status==="failed").map(n=>{let s=n.id||"check";return n.message?`${s}: ${n.message}`:s}).slice(0,12);return f$6(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:o,runId:e$c()})}async function vg(t$2,e=zs){if(t$2.includes("--help")||t$2.includes("-h")||t$2.includes("help"))return console.log(a$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let r=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof r>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let s$1=function(_){if(!_)return null;let V=_.trim().toLowerCase();return V==="minimal"||V==="java-only"||V==="go-only"||V==="dotnet-only"||V==="python-only"||V==="node-only"||V==="polyglot"||V==="enterprise"?V:null},i=function(_){let Ie=_.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Oe=(Ce,qe)=>{let at=_.match(new RegExp(`^\\s*${Ce}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return at?at[1].toLowerCase()==="true":qe};return {mode:Ie,dependency_sharing_mode:Yp(_),rules:{enforce_workspace_marker:Oe("enforce_workspace_marker",true),enforce_toolchain_lock:Oe("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Oe("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Oe("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Oe("require_mirror_lock_for_offline",true)}}};let c=["init"],p,d=false,h=false,u=false,f=false;for(let _=1;_<t$2.length;_+=1){let V=t$2[_];if(V==="--ci"){d=true;continue}if(V==="--offline"){h=true;continue}if(V==="--json"){u=true;continue}if(V==="--compliance-only"){f=true;continue}if(V==="--profile"){let K=t$2[_+1];if(!K||K.startsWith("-"))return console.log(a$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;p=K,_+=1;continue}if(V.startsWith("--profile=")){p=V.slice(10);continue}c.push(V);}let v=s$1(p);if(p&&!v)return console.log(a$2.red(`Invalid profile: ${p}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let k=process.cwd(),E=c.slice(1).filter(_=>!_.startsWith("-"));if(E.length>0){let _=P.resolve(k,E[0]),V=j$2(_),K=I.existsSync(_)?await Kt(_):"unknown";if(!Ze(_)&&(k$2(V,_)||m$1(V,_)||n$2(V,_)||l$1(V,_)||o$1(V,_)||K!=="unknown"))return await e(c)}let S=P.join(k,".rapidkit-workspace"),$=P.join(k,".rapidkit","workspace.json"),l;!I.existsSync(S)&&I.existsSync($)?l=k:(l=Ee(k),l||(l=cg(k)));let m=[],y=null,w=null;if(l)try{let _=t$1(l,"workspace.json").find(Ie=>I.existsSync(Ie))??q$1(l,"workspace.json"),V=await I.promises.readFile(_,"utf-8"),K=JSON.parse(V);w=s$1(K.profile);}catch{w=null;}let g=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],C={minimal:"minimal \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise \u2014 Polyglot + governance + Sigstore verification"},x=v;if(!!l&&!v&&!d&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let _=w||"minimal",{chosenProfile:V}=await b$1([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${_})`,choices:g.map(K=>({name:K===_?`${C[K]} \u2190 current`:C[K],value:K})),default:g.indexOf(_)}]);x=V;}let b=x||w||"minimal";if(l&&!f)try{let V=b==="python-only"||b==="polyglot"||b==="enterprise"?"poetry":"venv",K;try{let qe=(await I.promises.readFile(P.join(l,".python-version"),"utf-8")).trim();qe&&(K=qe);}catch{}let{syncWorkspaceFoundationFiles:Ie}=await import('./create-XYKXS3JB.js'),Oe=await Ie(l,{workspaceName:P.basename(l),installMethod:V,pythonVersion:K,profile:b,writeMarker:true,writeGitignore:true,onlyIfMissing:true});m.push({id:"workspace.foundation.sync",status:Oe.length>0?"passed":"skipped",message:Oe.length>0?`Workspace foundation synchronized: ${Oe.join(", ")}`:"Workspace foundation files are already up to date."});}catch(_){m.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${_.message}`});}else l&&m.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(l&&!f&&x)try{let _=q$1(l,"workspace.json"),V=await I.promises.readFile(_,"utf-8"),K=JSON.parse(V);if(K.profile=x,k$6.has(x)){delete K.bootstrap_note;let Oe=K.engine&&typeof K.engine=="object"?K.engine:void 0;Oe&&delete Oe.python_core;}await M__default.ensureDir(P.dirname(_)),await I.promises.writeFile(_,JSON.stringify(K,null,2)+`
300
+ `,"utf-8");let{syncWorkspaceContract:Ie}=await import('./workspace-contract-2V2BI6A3.js');await Ie({workspacePath:l}),m.push({id:"workspace.profile.sync",status:"passed",message:`Workspace profile synchronized to ${x} across canonical artifacts.`});}catch(_){m.push({id:"workspace.profile.sync",status:"failed",message:`Failed to synchronize workspace profile across canonical artifacts: ${_ instanceof Error?_.message:String(_)}`});}let T={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},j=null;if(l)try{let _=t$1(l,"policies.yml").find(K=>I.existsSync(K));if(!_)throw new Error("policy file missing");let V=await I.promises.readFile(_,"utf-8");j=V,T=i(V);}catch{m.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else m.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(l){let _=Xp(j);T.dependency_sharing_mode=_.mode,m.push({id:"policy.schema.dependency_sharing_mode",status:_.status,message:_.message}),m.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:T.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":T.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let V=I.existsSync(P.join(l,".workspai-workspace"))||I.existsSync(P.join(l,".rapidkit-workspace"));m.push({id:"policy.enforce_workspace_marker",status:!T.rules.enforce_workspace_marker||V?"passed":"failed",message:!T.rules.enforce_workspace_marker||V?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let K=t$1(l,"toolchain.lock").some(Ne=>I.existsSync(Ne));m.push({id:"policy.enforce_toolchain_lock",status:!T.rules.enforce_toolchain_lock||K?"passed":"failed",message:!T.rules.enforce_toolchain_lock||K?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Ie=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||t$1(l,"trusted-sources.lock").some(Ne=>I.existsSync(Ne));m.push({id:"policy.disallow_untrusted_tool_sources",status:!T.rules.disallow_untrusted_tool_sources||Ie?"passed":"failed",message:!T.rules.disallow_untrusted_tool_sources||Ie?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let Oe=t$1(l,"compatibility-matrix.json").find(Ne=>I.existsSync(Ne))??q$1(l,"compatibility-matrix.json"),Ce=I.existsSync(Oe),qe=T.rules.enforce_compatibility_matrix;if(m.push({id:"policy.enforce_compatibility_matrix",status:!qe||Ce?"passed":"failed",message:!qe||Ce?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),Ce)try{let Ne=await I.promises.readFile(Oe,"utf-8"),vt=JSON.parse(Ne),ra=!!vt&&typeof vt=="object";m.push({id:"compatibility.matrix.parse",status:ra?"passed":"failed",message:ra?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{m.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let at=t$1(l,"mirror-config.json").find(Ne=>I.existsSync(Ne))??q$1(l,"mirror-config.json"),hr=t$1(l,"mirror.lock").find(Ne=>I.existsSync(Ne))??q$1(l,"mirror.lock"),hn=I.existsSync(at),yn=I.existsSync(hr),ta={};if(hn)try{ta=JSON.parse(await I.promises.readFile(at,"utf-8")),m.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{m.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(f)m.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let Ne=await Ss(l,{ciMode:d,offlineMode:h});m.push(...Ne.checks.map(vt=>({id:vt.id,status:vt.status,message:vt.message}))),y=Ne.details,Ne.details.lockWritten&&(yn=true);}if(h){let Ne=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||ta.enabled===true;m.push({id:"offline.mirror.enabled",status:Ne?"passed":"failed",message:Ne?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let vt=T.rules.require_mirror_lock_for_offline;m.push({id:"offline.mirror.lock",status:!vt||yn?"passed":"failed",message:!vt||yn?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else m.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Xr=m$3({profile:b,runtimes:await q$3(l),mode:T.mode});Xr.profile!=="enterprise"?m.push({id:Xr.checkId,status:Xr.status,message:Xr.message}):(m.push({id:"profile.enterprise.ci",status:d?"passed":f?"skipped":"failed",message:d?"enterprise profile running with --ci.":f?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),m.push({id:"profile.enterprise.compatibility-matrix",status:Ce?"passed":"failed",message:Ce?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),m.push({id:"profile.enterprise.mirror-config",status:hn?"passed":"failed",message:hn?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}d&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),h&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let O=m.some(_=>_.id.startsWith("policy.schema.")&&_.status==="failed")||T.mode==="strict"&&m.some(_=>_.status==="failed"),F=q$1(l||k,"reports"),U=new Date().toISOString().replace(/[:.]/g,"-"),H=P.join(F,`bootstrap-compliance-${U}.json`),ie=P.join(F,"bootstrap-compliance.latest.json"),oe={schemaVersion:s.bootstrapCompliance.schemaVersion,command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:l,profile:b,options:{ci:d,offline:h,strict:T.mode==="strict",complianceOnly:f},policyMode:T.mode,policyRules:T.rules,mirrorLifecycle:y,checks:m},he=async _=>{b$n(`.workspai/reports/${P.basename(H)}`,_),b$n(t.bootstrapCompliance,_),await M__default.ensureDir(F),await gn(H,_),await gn(ie,_);};if(O){let _=Ts({...oe,result:"blocked",initExitCode:null},1,m);return await he(_),u?process.stdout.write(`${JSON.stringify(_,null,2)}
301
301
  `):(console.log(a$2.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(a$2.gray(`Compliance report: ${H}`))),1}if(u&&b==="enterprise"&&!d&&!f){let _=Ts({...oe,result:"blocked",initExitCode:null,complianceOnly:false,bootstrapRuntimeSkipped:{reason:"enterprise JSON bootstrap requires --ci for deterministic non-interactive execution.",nextAction:"npx workspai bootstrap --profile enterprise --ci --json"}},1,m);return await he(_),process.stdout.write(`${JSON.stringify(_,null,2)}
302
- `),1}let He=async _=>{let V=process.stdout.write.bind(process.stdout),K=process.stderr.write.bind(process.stderr),Ie=[],Oe=[];process.stdout.write=((Ce,qe,at)=>{let hr=typeof qe=="function"?qe:typeof at=="function"?at:void 0;return Ie.push(typeof Ce=="string"?Ce:Ce instanceof Uint8Array?Buffer.from(Ce).toString("utf8"):String(Ce)),hr?.(),true}),process.stderr.write=((Ce,qe,at)=>{let hr=typeof qe=="function"?qe:typeof at=="function"?at:void 0;return Oe.push(typeof Ce=="string"?Ce:Ce instanceof Uint8Array?Buffer.from(Ce).toString("utf8"):String(Ce)),hr?.(),true});try{return {exitCode:await _(),stdout:Ie.join(""),stderr:Oe.join("")}}finally{process.stdout.write=V,process.stderr.write=K;}},ve=_=>{let V=_.split(/\r?\n/).map(K=>K.trim()).filter(Boolean);return {bytes:Buffer.byteLength(_),excerpt:V.slice(0,12)}},D=0,G;if(!f)if(u){let _=await He(()=>e(c));D=_.exitCode,G={captured:true,stdout:ve(_.stdout),stderr:ve(_.stderr)};}else D=await e(c);let te=m.filter(_=>_.status==="failed").length,z=D!==0?"failed":te>0?"ok_with_warnings":"ok",ee=D!==0?D:te>0?1:0,Y=Ts({...oe,result:z,initExitCode:D,complianceOnly:f,...G?{initOutput:G}:{}},ee,m);if(await he(Y),l&&!f&&D===0)try{let{syncWorkspaceProjects:_}=await import('./workspace-E3MM3AIE.js');await _(l,u),await Yr(l,{silent:u});}catch{}if(u)process.stdout.write(`${JSON.stringify(Y,null,2)}
302
+ `),1}let He=async _=>{let V=process.stdout.write.bind(process.stdout),K=process.stderr.write.bind(process.stderr),Ie=[],Oe=[];process.stdout.write=((Ce,qe,at)=>{let hr=typeof qe=="function"?qe:typeof at=="function"?at:void 0;return Ie.push(typeof Ce=="string"?Ce:Ce instanceof Uint8Array?Buffer.from(Ce).toString("utf8"):String(Ce)),hr?.(),true}),process.stderr.write=((Ce,qe,at)=>{let hr=typeof qe=="function"?qe:typeof at=="function"?at:void 0;return Oe.push(typeof Ce=="string"?Ce:Ce instanceof Uint8Array?Buffer.from(Ce).toString("utf8"):String(Ce)),hr?.(),true});try{return {exitCode:await _(),stdout:Ie.join(""),stderr:Oe.join("")}}finally{process.stdout.write=V,process.stderr.write=K;}},ve=_=>{let V=_.split(/\r?\n/).map(K=>K.trim()).filter(Boolean);return {bytes:Buffer.byteLength(_),excerpt:V.slice(0,12)}},D=0,G;if(!f)if(u){let _=await He(()=>e(c));D=_.exitCode,G={captured:true,stdout:ve(_.stdout),stderr:ve(_.stderr)};}else D=await e(c);let te=m.filter(_=>_.status==="failed").length,z=D!==0?"failed":te>0?"ok_with_warnings":"ok",ee=D!==0?D:te>0?1:0,Y=Ts({...oe,result:z,initExitCode:D,complianceOnly:f,...G?{initOutput:G}:{}},ee,m);if(await he(Y),l&&!f&&D===0)try{let{syncWorkspaceProjects:_}=await import('./workspace-ROUEA3RT.js');await _(l,u),await Yr(l,{silent:u});}catch{}if(u)process.stdout.write(`${JSON.stringify(Y,null,2)}
303
303
  `);else {let _=m.filter(V=>V.status==="failed").length;_>0&&console.log(a$2.yellow(`\u26A0\uFE0F Bootstrap completed with ${_} policy/profile warnings.`)),console.log(a$2.gray(`Compliance report: ${H}`));}return ee}finally{typeof r>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=r;}}async function Pg(t,e=je){if(t.includes("--help")||t.includes("-h"))return console.log(a$2.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),0;let r=(t[1]||"").toLowerCase(),o=t.includes("--json"),n=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!r||!["python","node","go","java","dotnet","rust","php"].includes(r))return o?process.stdout.write(`${JSON.stringify({command:"setup",result:"error",error:"Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]"},null,2)}
304
304
  `):console.log(a$2.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),1;let s=async(v,k)=>{if(v==="node"){if(!I.existsSync(P.join(k,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let S=I.existsSync(P.join(k,"pnpm-lock.yaml")),$=I.existsSync(P.join(k,"yarn.lock"));return S?{exitCode:await e("pnpm",["install","--lockfile-only","--ignore-scripts"],k)}:$?{exitCode:await e("yarn",["install","--ignore-scripts"],k)}:{exitCode:await e("npm",["install","--package-lock-only","--ignore-scripts"],k)}}if(v==="go")return I.existsSync(P.join(k,"go.mod"))?{exitCode:await e("go",["mod","download"],k)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."};if(v==="java"){let E=I.existsSync(P.join(k,"pom.xml")),S=I.existsSync(P.join(k,"build.gradle"))||I.existsSync(P.join(k,"build.gradle.kts")),$=P.join(k,process.platform==="win32"?"gradlew.bat":"gradlew"),l=I.existsSync($);return !E&&!S?{exitCode:0,message:"Java warm-up skipped: pom.xml or build.gradle not found in current directory."}:E?{exitCode:await e("mvn",["-B","-q","-DskipTests","dependency:go-offline"],k)}:{exitCode:await e(l?$:"gradle",["--no-daemon","dependencies"],k)}}return v==="dotnet"?(()=>{let S=[{dir:k,depth:0}],$=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;S.length>0;){let l=S.shift();if(!l||l.depth>3)continue;let m=[];try{m=I.readdirSync(l.dir,{withFileTypes:true});}catch{continue}for(let y of m)if(y.isFile()){let w=y.name.toLowerCase();if(w.endsWith(".sln")||w.endsWith(".csproj"))return true}else y.isDirectory()&&!$.has(y.name)&&S.push({dir:P.join(l.dir,y.name),depth:l.depth+1});}return false})()?{exitCode:await e("dotnet",["restore"],k)}:{exitCode:0,message:".NET warm-up skipped: .sln or *.csproj not found in current project tree."}:v==="rust"?I.existsSync(P.join(k,"Cargo.toml"))?{exitCode:await e("cargo",["fetch"],k)}:{exitCode:0,message:"Rust warm-up skipped: Cargo.toml not found in current directory."}:v==="php"?I.existsSync(P.join(k,"composer.json"))?{exitCode:await e("composer",["install","--no-interaction","--no-scripts"],k)}:{exitCode:0,message:"PHP warm-up skipped: composer.json not found in current directory."}:{exitCode:0,message:"Dependency warm-up is not available for this runtime."}};if(o){let v=process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT;process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT="1";try{let E=await Be(r,{runCommandInCwd:e,runCoreRapidkit:async(y,w)=>(await g$9(y,{...w,cwd:void 0})).exitCode}).checkPrereqs(),S=Ee(process.cwd()),$=S||process.cwd(),l=null;if(r==="node"&&E.exitCode===0&&(l=process.version),S&&l){let y=t$1(S,"toolchain.lock").find(C=>I.existsSync(C))??q$1(S,"toolchain.lock"),w=q$1(S,"toolchain.lock"),g={};try{g=JSON.parse(await I.promises.readFile(y,"utf-8"));}catch{}(!g.runtime||typeof g.runtime!="object")&&(g.runtime={}),g.runtime[r]={version:l,detectedAt:new Date().toISOString()},await M__default.ensureDir(P.dirname(w)),await I.promises.writeFile(w,JSON.stringify(g,null,2)+`
305
305
  `,"utf-8");}let m={requested:n,status:"not-requested",exitCode:null,targets:0,messages:[]};if(n&&E.exitCode===0){let y=[$];if(r==="java"&&S){let R=(await qs(S)).filter(b=>{let T=j$2(b);return m$1(T,b)});R.length>0&&(y=R);}let w=[];for(let x of y)w.push(await s(r,x));let g=w.filter(x=>x.exitCode!==0),C=w.filter(x=>x.exitCode===0&&!/skipped/i.test(x.message||""));m.status=g.length>0?"failed":C.length>0?"passed":"skipped",m.exitCode=g[0]?.exitCode??0,m.targets=y.length,m.messages=w.map(x=>x.message).filter(x=>typeof x=="string");}return process.stdout.write(`${JSON.stringify({command:"setup",runtime:r,result:E.exitCode===0?"ok":"failed",exitCode:E.exitCode,workspacePath:S,version:l,warmDeps:n,warmDependencies:m},null,2)}
@@ -327,7 +327,7 @@ Hints:`));for(let v of p)console.log(a$2.gray(`- ${v}`));}return c.exitCode}func
327
327
  `),0):(console.log(a$2.cyan("Workspai mirror status")),console.log(a$2.gray(`Workspace: ${o}`)),console.log(a$2.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(a$2.gray(`Lock: ${f?"present":"missing"} (${s$1})`)),console.log(a$2.gray(`Artifacts: ${v}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let u=await Ss(o,{ciMode:true,offlineMode:e==="verify",forceRun:true}),f=u.checks.filter(E=>E.status==="failed"),v=u.checks.some(E=>E.id.startsWith("mirror.verify.")&&E.status==="failed");if(e==="verify"&&v){let E={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await h(),details:u.details,checks:u.checks};if(await d(E),r)return process.stdout.write(`${JSON.stringify(E,null,2)}
328
328
  `),1;console.log(a$2.red("\u274C Mirror verify failed."));for(let S of u.checks.filter($=>$.id.startsWith("mirror.verify.")))console.log(a$2.gray(`- ${S.id}: ${S.message}`));return 1}if(f.length>0){let E={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await h(),details:u.details,checks:u.checks};if(await d(E),r)return process.stdout.write(`${JSON.stringify(E,null,2)}
329
329
  `),1;console.log(a$2.yellow(`\u26A0\uFE0F Mirror ${e} completed with ${f.length} issue(s).`));for(let S of f)console.log(a$2.gray(`- ${S.id}: ${S.message}`));return 1}let k={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:await h(),details:u.details,checks:u.checks};return await d(k),r?(process.stdout.write(`${JSON.stringify(k,null,2)}
330
- `),0):e==="rotate"?(console.log(a$2.green(`\u2705 Mirror rotate completed. Rotated files: ${u.details.rotatedFiles}.`)),0):e==="verify"?(console.log(a$2.green(`\u2705 Mirror verify completed. Verified artifacts: ${u.details.verifiedArtifacts}.`)),0):(console.log(a$2.green(`\u2705 Mirror sync completed. Synced artifacts: ${u.details.syncedArtifacts}.`)),0)}return console.log(a$2.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function zs(t){let e=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let r=process.cwd(),o=await Qp(r,async()=>{let n=Ee(r),s=Be("python",{runCommandInCwd:je,runCoreRapidkit:e$1}),i=Be("dotnet",{runCommandInCwd:je,runCoreRapidkit:e$1}),c=Be("rust",{runCommandInCwd:je,runCoreRapidkit:e$1}),p=Be("php",{runCommandInCwd:je,runCoreRapidkit:e$1}),d=t.slice(1).filter(S=>!S.startsWith("-"));if(d.length>0){let S=P.resolve(r,d[0]),$=j$2(S),l=await Kt(S);return k$2($,S)||l==="go"?await $s(S):m$1($,S)||l==="java"?await bt("init",S):n$2($,S)||l==="dotnet"?ae(await i.initProject(S)):l$1($,S)||l==="node"?await Ns(S):o$1($,S)||l==="python"?await Os(S,s):l==="rust"?ae(await c.initProject(S)):l==="php"?ae(await p.initProject(S)):await e$1(t,{cwd:r})}let h=j$2(r),u=!!Ee(r)&&r===Ee(r);if(!u&&k$2(h,r))return await $s(r);let f=await Kt(r);if(!u&&(m$1(h,r)||f==="java"))return await bt("init",r);if(!u&&(n$2(h,r)||f==="dotnet"))return ae(await i.initProject(r));if(!u&&(l$1(h,r)||f==="node"))return await Ns(r);if(!u&&(o$1(h,r)||f==="python"))return await Os(r,s);if(!u&&f==="rust")return ae(await c.initProject(r));if(!u&&f==="php")return ae(await p.initProject(r));let v=n||Ee(r),k=Bp(r),E=k?P.dirname(P.dirname(k)):null;if(E&&E!==v){let S=j$2(E),$=await Kt(E);return k$2(S,E)||$==="go"?await $s(E):m$1(S,E)||$==="java"?await bt("init",E):n$2(S,E)||$==="dotnet"?ae(await i.initProject(E)):l$1(S,E)||$==="node"?await Ns(E):o$1(S,E)||$==="python"?await Os(E,s):$==="rust"?ae(await c.initProject(E)):$==="php"?ae(await p.initProject(E)):await e$1(["init"],{cwd:E})}if(v&&r===v){console.log(a$2.yellow("\u26A0\uFE0F Running `npx workspai init` at workspace root.")),console.log(a$2.gray(" Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n workspace-profile dependencies first, then project dependency initialization.\n"));let S=await Bs(v);if(S!==0)return S;let{runWorkspaceStage:$}=await import('./workspace-run-HFOY2UYT.js');return (await $({workspacePath:v,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:true,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!v){let S=await b(),$=l$6(),{name:l}=kg($);await M__default.ensureDir($);let{createProject:m}=await import('./create-7CWWGDXQ.js');return await m(l,{yes:true,userConfig:S,parentDirectory:$}),0}return await e$1(t,{cwd:r})});return o.ok?o.value:o.code}finally{typeof e>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e;}}async function Gp(t){let e=Ee(t);if(!e)return [];let r="warn";try{let p=t$1(e,"policies.yml").find(u=>I.existsSync(u));if(!p)return [];let d=await I.promises.readFile(p,"utf-8");(d.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??d.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(r="strict");}catch{return []}if(r!=="strict")return [];let o=[],n=t$1(e,"toolchain.lock").find(p=>I.existsSync(p));if(!n||!I.existsSync(n))return o.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),o;let s={};try{s=JSON.parse(await I.promises.readFile(n,"utf-8"));}catch{return o.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),o}let i=s.runtime??{},c=j$2(t);k$2(c,t)&&!i.go?.version?o.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):l$1(c,t)&&!i.node?.version?o.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):m$1(c,t)&&!i.java?.version?o.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):n$2(c,t)&&!i.dotnet?.version?o.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):o$1(c,t)&&!i.python?.version&&o.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let p=t$1(e,"workspace.json").find(v=>I.existsSync(v));if(!p)throw new Error("workspace manifest missing");let h=JSON.parse(await I.promises.readFile(p,"utf-8")).profile??"",u=m$2(t,c),f=n$3({profile:h,runtime:u.runtime,subjectLabel:P.basename(t),mode:"strict"});f.ok||o.push(`${f.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return o}async function Eg(){let t=async m=>{if(!b$3()||!m.toLowerCase().endsWith(".cmd"))return false;try{let w=(await M__default.readFile(m,"utf8")).replace(/\r\n/g,`
330
+ `),0):e==="rotate"?(console.log(a$2.green(`\u2705 Mirror rotate completed. Rotated files: ${u.details.rotatedFiles}.`)),0):e==="verify"?(console.log(a$2.green(`\u2705 Mirror verify completed. Verified artifacts: ${u.details.verifiedArtifacts}.`)),0):(console.log(a$2.green(`\u2705 Mirror sync completed. Synced artifacts: ${u.details.syncedArtifacts}.`)),0)}return console.log(a$2.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function zs(t){let e=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let r=process.cwd(),o=await Qp(r,async()=>{let n=Ee(r),s=Be("python",{runCommandInCwd:je,runCoreRapidkit:e$1}),i=Be("dotnet",{runCommandInCwd:je,runCoreRapidkit:e$1}),c=Be("rust",{runCommandInCwd:je,runCoreRapidkit:e$1}),p=Be("php",{runCommandInCwd:je,runCoreRapidkit:e$1}),d=t.slice(1).filter(S=>!S.startsWith("-"));if(d.length>0){let S=P.resolve(r,d[0]),$=j$2(S),l=await Kt(S);return k$2($,S)||l==="go"?await $s(S):m$1($,S)||l==="java"?await bt("init",S):n$2($,S)||l==="dotnet"?ae(await i.initProject(S)):l$1($,S)||l==="node"?await Ns(S):o$1($,S)||l==="python"?await Os(S,s):l==="rust"?ae(await c.initProject(S)):l==="php"?ae(await p.initProject(S)):await e$1(t,{cwd:r})}let h=j$2(r),u=!!Ee(r)&&r===Ee(r);if(!u&&k$2(h,r))return await $s(r);let f=await Kt(r);if(!u&&(m$1(h,r)||f==="java"))return await bt("init",r);if(!u&&(n$2(h,r)||f==="dotnet"))return ae(await i.initProject(r));if(!u&&(l$1(h,r)||f==="node"))return await Ns(r);if(!u&&(o$1(h,r)||f==="python"))return await Os(r,s);if(!u&&f==="rust")return ae(await c.initProject(r));if(!u&&f==="php")return ae(await p.initProject(r));let v=n||Ee(r),k=Bp(r),E=k?P.dirname(P.dirname(k)):null;if(E&&E!==v){let S=j$2(E),$=await Kt(E);return k$2(S,E)||$==="go"?await $s(E):m$1(S,E)||$==="java"?await bt("init",E):n$2(S,E)||$==="dotnet"?ae(await i.initProject(E)):l$1(S,E)||$==="node"?await Ns(E):o$1(S,E)||$==="python"?await Os(E,s):$==="rust"?ae(await c.initProject(E)):$==="php"?ae(await p.initProject(E)):await e$1(["init"],{cwd:E})}if(v&&r===v){console.log(a$2.yellow("\u26A0\uFE0F Running `npx workspai init` at workspace root.")),console.log(a$2.gray(" Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n workspace-profile dependencies first, then project dependency initialization.\n"));let S=await Bs(v);if(S!==0)return S;let{runWorkspaceStage:$}=await import('./workspace-run-I2W5PIPK.js');return (await $({workspacePath:v,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:true,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!v){let S=await b(),$=l$6(),{name:l}=kg($);await M__default.ensureDir($);let{createProject:m}=await import('./create-XYKXS3JB.js');return await m(l,{yes:true,userConfig:S,parentDirectory:$}),0}return await e$1(t,{cwd:r})});return o.ok?o.value:o.code}finally{typeof e>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e;}}async function Gp(t){let e=Ee(t);if(!e)return [];let r="warn";try{let p=t$1(e,"policies.yml").find(u=>I.existsSync(u));if(!p)return [];let d=await I.promises.readFile(p,"utf-8");(d.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??d.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(r="strict");}catch{return []}if(r!=="strict")return [];let o=[],n=t$1(e,"toolchain.lock").find(p=>I.existsSync(p));if(!n||!I.existsSync(n))return o.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),o;let s={};try{s=JSON.parse(await I.promises.readFile(n,"utf-8"));}catch{return o.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),o}let i=s.runtime??{},c=j$2(t);k$2(c,t)&&!i.go?.version?o.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):l$1(c,t)&&!i.node?.version?o.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):m$1(c,t)&&!i.java?.version?o.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):n$2(c,t)&&!i.dotnet?.version?o.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):o$1(c,t)&&!i.python?.version&&o.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let p=t$1(e,"workspace.json").find(v=>I.existsSync(v));if(!p)throw new Error("workspace manifest missing");let h=JSON.parse(await I.promises.readFile(p,"utf-8")).profile??"",u=m$2(t,c),f=n$3({profile:h,runtime:u.runtime,subjectLabel:P.basename(t),mode:"strict"});f.ok||o.push(`${f.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return o}async function Eg(){let t=async m=>{if(!b$3()||!m.toLowerCase().endsWith(".cmd"))return false;try{let w=(await M__default.readFile(m,"utf8")).replace(/\r\n/g,`
331
331
  `).toLowerCase(),g=w.includes("\\.rapidkit\\rapidkit"),C=w.includes("\\.rapidkit\\rapidkit.cmd")||w.includes("\\.rapidkit\\rapidkit.exe")||w.includes("\\.venv\\scripts\\rapidkit.exe");return g&&!C}catch{return false}},e$2=process.cwd(),r=process.argv.slice(2),o=r[0],n=o==="init",s=new Set(r$3),i=!o||o==="--help"||o==="-h"||o==="help",c=Ze(e$2),p=u(e$2,"project.json").some(m=>I.existsSync(m)),d=j$2(e$2),h=await Kt(e$2),u$1=k$2(d,e$2)||l$1(d,e$2)||o$1(d,e$2)||m$1(d,e$2)||n$2(d,e$2)||h$5(h??void 0),f=!!o&&s.has(o)&&u$1,v=process.env.RAPIDKIT_LOCAL_LAUNCHER_BYPASS==="1";if(qr(r)||r[0]==="create")return false;if(Vs(r))return true;if(r[0]==="init"&&c&&!p)return false;if(Ks(r))return true;try{let m=o==="shell"&&r[1]==="activate",y=o==="create",w=await xc(e$2,{cwd:e$2,timeoutMs:1200});if(w.ok&&w.data?.isRapidkitProject&&w.data.engine==="python"){let g=y||qr(r);if(!i&&!m&&!g&&!n&&!f&&Gn(r)){if(o&&$p.includes(o)){let x=await Gp(e$2).catch(()=>[]);if(x.length>0){process.stderr.write(a$2.red("\u274C Strict policy violations prevent running this command:")+`
332
332
  `);for(let R of x)process.stderr.write(a$2.red(` \u2022 ${R}`)+`
333
333
  `);process.exit(1);}}let C=await e$1(process.argv.slice(2),{cwd:e$2});process.exit(C);}}}catch{}let k=Bp(e$2),E=b$3(),S=v?[]:p$2(e$2),$=null;for(let m of S)if(await M__default.pathExists(m)){if(await t(m)){e.warn(`Skipping legacy/broken Windows launcher candidate: ${m}. Falling back to core bridge.`);continue}$=m;break}let l=o==="create";if(o==="init"&&c&&!p)return false;if(o&&$p.includes(o)){let m=await Gp(e$2);if(m.length>0){process.stderr.write(a$2.red("\u274C Strict policy violations prevent running this command:")+`
@@ -370,11 +370,11 @@ Discover more:
370
370
  `)),process.exit(1));}if(e$2.dryRun){console.log(a$2.cyan(`
371
371
  \u{1F50D} Dry-run mode - showing what would be created:
372
372
  `)),console.log(a$2.white("\u{1F4C2} Path:"),c$1),console.log(a$2.white("\u{1F4E6} Type:"),s?`Project (${e$2.template})`:"Workspace"),console.log();return}if(!e$2.yes&&!s?await b$1([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"Workspai User"}]):e$2.yes&&console.log(a$2.gray(`Using default values (--yes flag)
373
- `)),s){let p=String(e$2.template||"").trim(),d=b$2(p);if(d$1(d)){let l=await Fs(["create","project",d,t,...e$2.skipGit?["--skip-git"]:[],...e$2.skipInstall?["--skip-install"]:[]]);l!==0&&process.exit(l);return}if(!!!Hs(process.cwd())){let{registerWorkspaceAtPath:l}=await import('./create-7CWWGDXQ.js');if(e$2.createWorkspace)await l(process.cwd(),{skipGit:e$2.skipGit,yes:e$2.yes,userConfig:r});else if(!e$2.noWorkspace)if(e$2.yes)await l(process.cwd(),{skipGit:e$2.skipGit,yes:true,userConfig:r});else {let{createWs:m}=await b$1([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);m&&await l(process.cwd(),{skipGit:e$2.skipGit,yes:false,userConfig:r});}}let u=["create","project",d,t,"--output",process.cwd()];e$2.yes&&u.push("--yes");let f$1=Ee(process.cwd()),v=!!e$2.skipInstall,k=v||!!f$1;v&&u.push("--skip-essentials");let E=k?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,S=await f(u,{cwd:process.cwd(),env:E});S!==0&&process.exit(S),f$1&&!e$2.skipInstall&&(console.log(a$2.gray("\u2139\uFE0F Fast create mode (workspace): dependencies were deferred.")),console.log(a$2.white(" Next: cd <project-name> && npx workspai init")));let $=Hs(process.cwd());if($){let l=P.dirname($),m=P.join(l,".python-version"),y=P.join(c$1,".python-version");try{if(await M__default.pathExists(m)){let w=I.readFileSync(m,"utf-8");I.writeFileSync(y,w.trim()+`
373
+ `)),s){let p=String(e$2.template||"").trim(),d=b$2(p);if(d$1(d)){let l=await Fs(["create","project",d,t,...e$2.skipGit?["--skip-git"]:[],...e$2.skipInstall?["--skip-install"]:[]]);l!==0&&process.exit(l);return}if(!!!Hs(process.cwd())){let{registerWorkspaceAtPath:l}=await import('./create-XYKXS3JB.js');if(e$2.createWorkspace)await l(process.cwd(),{skipGit:e$2.skipGit,yes:e$2.yes,userConfig:r});else if(!e$2.noWorkspace)if(e$2.yes)await l(process.cwd(),{skipGit:e$2.skipGit,yes:true,userConfig:r});else {let{createWs:m}=await b$1([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);m&&await l(process.cwd(),{skipGit:e$2.skipGit,yes:false,userConfig:r});}}let u=["create","project",d,t,"--output",process.cwd()];e$2.yes&&u.push("--yes");let f$1=Ee(process.cwd()),v=!!e$2.skipInstall,k=v||!!f$1;v&&u.push("--skip-essentials");let E=k?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,S=await f(u,{cwd:process.cwd(),env:E});S!==0&&process.exit(S),f$1&&!e$2.skipInstall&&(console.log(a$2.gray("\u2139\uFE0F Fast create mode (workspace): dependencies were deferred.")),console.log(a$2.white(" Next: cd <project-name> && npx workspai init")));let $=Hs(process.cwd());if($){let l=P.dirname($),m=P.join(l,".python-version"),y=P.join(c$1,".python-version");try{if(await M__default.pathExists(m)){let w=I.readFileSync(m,"utf-8");I.writeFileSync(y,w.trim()+`
374
374
  `),e.debug(`Synced Python version ${w.trim()} from workspace to project`);}}catch(w){e.debug("Could not sync Python version from workspace:",w);}}if(!e$2.skipInstall){let l=await e$1(["init",c$1],{cwd:process.cwd()});if(l!==0&&process.exit(l),$){let m=P.dirname($),y=P.join(m,".python-version"),w=P.join(c$1,".python-version");try{if(await M__default.pathExists(y)){let g=I.readFileSync(y,"utf-8");I.writeFileSync(w,g.trim()+`
375
- `),e.debug(`Re-synced Python version ${g.trim()} after init`);}}catch(g){e.debug("Could not re-sync Python version after init:",g);}}}}else {let{createProject:p}=await import('./create-7CWWGDXQ.js');await p(t,{skipGit:e$2.skipGit,skipPythonEngine:e$2.skipPythonEngine,dryRun:e$2.dryRun,yes:e$2.yes,userConfig:n$1,installMethod:e$2.installMethod,profile:e$2.profile,parentDirectory:P.dirname(c$1)});}}catch(r){r instanceof a$1?(e.error(`
375
+ `),e.debug(`Re-synced Python version ${g.trim()} after init`);}}catch(g){e.debug("Could not re-sync Python version after init:",g);}}}}else {let{createProject:p}=await import('./create-XYKXS3JB.js');await p(t,{skipGit:e$2.skipGit,skipPythonEngine:e$2.skipPythonEngine,dryRun:e$2.dryRun,yes:e$2.yes,userConfig:n$1,installMethod:e$2.installMethod,profile:e$2.profile,parentDirectory:P.dirname(c$1)});}}catch(r){r instanceof a$1?(e.error(`
376
376
  \u274C ${r.message}`),r.details&&e.warn(`\u{1F4A1} ${r.details}`),e.debug("Error code:",r.code)):(e.error(`
377
- \u274C An unexpected error occurred:`),console.error(r)),process.exit(1);}finally{$t=null;}});zc(ge);Dl(ge);tl(ge);Tl(ge);ge.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{ag({json:t.json});});ge.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:r}=await import('./analyze-5ENZTHOT.js'),o=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(o,null,2)):r(o),o.summary.verdict==="blocked"&&process.exit(2);}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:"analyze",code:"analyze.failed",message:r}),null,2)):console.error(a$2.red(`Analyze failed: ${r}`)),process.exit(1);}});Ic(ge);ge.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(a$2.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function r(p){let d=p;for(;;){let h=u(d,"context.json").find(f=>I.existsSync(f));if(h)return h;let u$1=P.dirname(d);if(u$1===d)break;d=u$1;}return null}let o$1=r(e);function n(p){let d=p;for(;;){let h=P.join(d,".venv"),u=[P.join(d,".workspai","activate"),P.join(d,".rapidkit","activate")].find(v=>I.existsSync(v))??P.join(d,".workspai","activate");if(I.existsSync(u)||I.existsSync(h))return {venv:h,activateFile:u};let f=P.dirname(d);if(f===d)break;d=f;}return null}let s=n(e);!o$1&&!s&&(console.log(a$2.yellow(Vl(e))),process.exit(1));let i;s&&I.existsSync(s.activateFile)?i=s.activateFile:s&&I.existsSync(s.venv)?i=o(s.venv):(console.log(a$2.yellow("No virtual environment found")),process.exit(1));let c=b$3();console.log(c?`call "${i}"`:`. "${i}"`);});ge.command(v.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$4({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});ge.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(a$2.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:r}=await import('./pipeline-NDV7DBB7.js');await r({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});ge.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(a$2.red(`Unknown autopilot action: ${t}`)),console.log(a$2.gray("Available: release")),process.exit(1));let r=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(r)||(console.log(a$2.red(`Invalid autopilot mode: ${e.mode}`)),console.log(a$2.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let o=Ds({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-PNSWAVZG.js'),s;try{s=await n({workspacePath:process.cwd(),mode:r,since:e.since,parallel:e.parallel===true,maxWorkers:o,json:e.json===true,output:e.output});}catch(i){let c=i instanceof Error?i.message:String(i);console.log(a$2.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(s,null,2)),s.summary.exitCode!==0&&process.exit(s.summary.exitCode);});ge.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Us(t,e);r!==0&&process.exit(r);});ge.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (defaults to nearest or managed default)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Zp(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});r!==0&&process.exit(r);});ge.command("goal [intent]").description("Compile a plain-language engineering intent into a governed, evidence-bound Goal Pack").option("--workspace <path>","Explicit canonical workspace path").option("--scope <scope>","Bound the Goal to workspace, project:<name>, or projects:<name>,<name>").addOption(new Option("--runtime <runtime>","Bind a coverage Goal to a canonical runtime in its scope").choices(["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"])).addOption(new Option("--for-agent <consumer>","Portable handoff consumer").choices(["generic","claude","codex"]).default("generic")).option("--max-attempts <count>","Maximum bounded proposal attempts","5").option("--refresh","Refresh the canonical Workspace Intelligence chain before planning").option("--dry-run","Validate and preview the Goal Pack without writing artifacts").option("--status [goal-id]","Inspect the active or named Goal Pack and validate its bindings").option("--list","List registered Goal Packs in the resolved workspace").option("--activate <goal-id>","Make a registered Goal Pack the active agent objective").option("--cancel <goal-id>","Cancel a registered Goal Pack without deleting evidence").option("--prepare <goal-id>","Create and link the deterministic CLI verification contract").option("--verify <goal-id>","Run CLI-owned verification for a prepared Goal Pack").option("--no-run","Read verification evidence without executing producer commands").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let{validateGoalCommandSelection:r}=await import('./goal-command-contract-43E22XQD.js'),o=r({intent:t,...e});if(o.operation!=="plan"){let u=b$5({startPath:process.cwd(),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!u)throw new Error("No canonical Workspai workspace could be resolved.");let{buildGoalLifecycleResult:f,inspectGoalLifecycle:v,prepareGoalVerification:k,transitionGoalLifecycle:E,verifyGoalLifecycle:S}=await import('./goal-lifecycle-PSPYQ4TR.js'),$=e.prepare?await k({workspacePath:u.workspacePath,goalId:e.prepare}):null,l=e.verify?await S({workspacePath:u.workspacePath,goalId:e.verify,run:e.run!==false}):null,m=e.activate?await E({workspacePath:u.workspacePath,goalId:e.activate,action:"activate"}):e.cancel?await E({workspacePath:u.workspacePath,goalId:e.cancel,action:"cancel"}):null,y=await v({workspacePath:u.workspacePath,goalId:typeof e.status=="string"?e.status:m?.goal.id??$?.goal.id??l?.goal.id,validateBindings:!(e.list||e.cancel)}),w=f({operation:o.operation,activeGoalId:y.index.activeGoalId,goal:y.active,goals:y.index.goals,goalPack:y.goalPack,verifiedGoalId:l?.verifiedGoalId??$?.verifiedGoalId??null,verification:l?.verification??null});if(e.json)console.log(JSON.stringify(w,null,2));else if(e.list){console.log(a$2.bold(`Goals \xB7 ${y.index.goals.length}`));for(let g of y.index.goals)console.log(`${g.id===y.index.activeGoalId?a$2.green("\u25CF"):a$2.gray("\u25CB")} ${g.objective} \xB7 ${g.lifecycle} \xB7 ${g.state}`);}else y.active?(console.log(a$2.bold(y.active.objective)),console.log(a$2.gray(` Goal: ${y.active.id}`)),console.log(a$2.gray(` Lifecycle: ${y.active.lifecycle}`)),console.log(a$2.gray(` Planning state: ${y.active.state}`))):console.log(a$2.yellow("No active Goal Pack is registered."));return}let n=Number(e.maxAttempts??5),{planGoalPack:s}=await import('./goal-pack-G7SAYDIC.js'),c=e.json!==true&&process.stdin.isTTY===true&&process.stdout.isTTY===true?await import('./goal-interactive-selection-6YJOK4WC.js'):null,p=await s({startPath:process.cwd(),intent:o.intent,workspacePath:e.workspace,scope:e.scope,runtime:e.runtime,consumer:e.forAgent,maxAttempts:n,refresh:e.refresh===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),...c?{selectScope:c.selectGoalScopeInteractively,selectCoverageRuntime:c.selectGoalCoverageRuntimeInteractively}:{}});if(e.json){console.log(JSON.stringify(p,null,2));return}let d=p.goalPack,h=d.state==="ready-to-plan"?a$2.green("\u2714 Governed Goal Pack ready to plan"):d.state==="blocked"?a$2.red("\u25A0 Goal Pack blocked by missing bounded evidence"):d.state==="needs-evidence"?a$2.yellow("\u25C6 Goal Pack needs measurement evidence"):a$2.yellow("\u25C6 Goal Pack needs clarification");console.log(h),console.log(a$2.bold(` ${d.intent.statement}`)),console.log(a$2.gray(` Goal: ${d.id}`)),console.log(a$2.gray(` Scope: ${d.scope.kind} \xB7 ${d.scope.projects.length} project(s) \xB7 ${d.baseline.runtimes.length} runtime(s)`)),console.log(a$2.gray(` Evidence: ${d.baseline.graph.entities} entities \xB7 ${d.baseline.graph.relationships} relationships \xB7 ${d.baseline.graph.proofCoveragePercent}% relation proof coverage`)),console.log(a$2.gray(" Mutation: proposal only \xB7 explicit approval \xB7 CLI-owned verify/rollback")),d.decision&&console.log(a$2.yellow(` Decision: ${d.decision.question}`)),p.dryRun?console.log(a$2.cyan(" Preview only; no artifacts were written.")):(console.log(a$2.gray(` Goal Pack: ${d.artifacts.goalPack}`)),console.log(a$2.gray(` Agent handoff: ${d.artifacts.agentHandoff}`))),console.log(a$2.gray(` Next: ${d.commands.planVerifiedGoal??d.commands.inspectGraph}`));}catch(r){let o=r instanceof Error?r.message:String(r),n=e.verify?"verify":e.prepare?"prepare":e.activate?"activate":e.cancel?"cancel":e.list?"list":e.status!==void 0?"status":null;e.json?console.log(JSON.stringify(c$1({operation:n?`goal.${n}`:"goal.plan",code:n?`goal.${n}.failed`:"goal.plan.failed",message:o,context:{scope:e.scope??null,runtime:e.runtime??null,refresh:e.refresh===true,goalId:e.prepare??e.verify??e.activate??e.cancel??(typeof e.status=="string"?e.status:null)}}),null,2)):console.log(a$2.red(`\u274C Goal ${n?`${n} operation`:"planning"} failed: ${o}`)),process.exit(1);}});var fn=ge.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");fn.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await To({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(a$2.green(`\u2714 Workspace snapshot created: ${r.manifest.name}`)),console.log(a$2.gray(` Mode: ${r.manifest.mode}`)),console.log(a$2.gray(` Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot create",code:"snapshot.create.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t??null}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot create failed: ${r.message}`)),process.exit(1);}});fn.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await pl({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(a$2.yellow("No workspace snapshots found."));return}for(let r of e)console.log(a$2.cyan(r.name)),console.log(a$2.gray(` ${r.createdAt} | ${r.mode} | ${r.projects.length} project(s)`)),console.log(a$2.gray(` ${r.snapshotPath}`));}catch(e){t.json&&(console.log(JSON.stringify(c$1({operation:"snapshot list",code:"snapshot.list.failed",message:e.message,context:{workspacePath:t.workspace??null}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});fn.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ll({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(a$2.cyan(`Snapshot: ${r.manifest.name}`)),console.log(a$2.gray(` Mode: ${r.manifest.mode}`)),console.log(a$2.gray(` Created: ${r.manifest.createdAt}`)),console.log(a$2.gray(` Projects: ${r.manifest.projects.length}`)),console.log(a$2.gray(` Files: ${r.estimatedFileCount}`)),console.log(a$2.gray(` Bytes: ${r.estimatedBytes}`)),console.log(a$2.gray(` Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot inspect",code:"snapshot.inspect.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot inspect failed: ${r.message}`)),process.exit(1);}});fn.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ul({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(r,null,2));return}r.dryRun?console.log(a$2.cyan(`Snapshot restore dry-run: ${t}`)):console.log(a$2.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(a$2.gray(` Snapshot: ${r.snapshotPath}`)),console.log(a$2.gray(` Restored paths: ${r.restoredPaths.join(", ")}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot restore",code:"snapshot.restore.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot restore failed: ${r.message}`)),process.exit(1);}});function _g(t){return (t instanceof Error?t.message:String(t)).replace(/file:\/\/\/[^\s"']+/g,"<local-path>").replace(/\\\\[^\\\s"']+[\\][^\s"']+/g,"<local-path>").replace(/[A-Za-z]:[\\/][^\s"']+/g,"<local-path>").replace(/\/(?:Users|home|private|var|opt|srv|mnt|Volumes|tmp)\/[^\s"']+/g,"<local-path>")}async function ed(t){try{let{buildAgentBootstrapReceipt:e}=await import('./project-agent-entry-HEBGPLMX.js'),r=await e({startPath:t.project,forAgent:t.forAgent,validateLiveInputs:t.liveInputs!==false});if(t.json)console.log(JSON.stringify(r,null,2));else {let o=r.status==="ready"?a$2.green:r.status==="degraded"?a$2.yellow:a$2.red;console.log(o(`Agent entry: ${r.status}`)),console.log(a$2.gray(` Project: ${r.project.name}`)),console.log(a$2.gray(` Workspace: ${r.workspace.name}`)),console.log(a$2.gray(` Consumer: ${r.resolvedHost}`)),console.log(a$2.gray(` Receipt: ${r.receiptId.slice(0,16)}`));for(let n of r.checks.filter(s=>s.status!=="passed"))console.log((n.status==="failed"?a$2.red:a$2.yellow)(` ${n.id}: ${n.message}`));console.log(a$2.gray(` Next: ${r.nextActions[0]}`));}(r.status==="blocked"||t.strict&&r.status!=="ready")&&process.exit(2);}catch(e){let r=_g(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"agent.entry.bootstrap.failed",message:r}),null,2)):console.log(a$2.red(`Agent entry failed: ${r}`)),process.exit(1);}}var Ig=ge.command("agent").description("Bootstrap coding agents from canonical Workspai project evidence");Ig.command("bootstrap").description("Issue a portable canonical-first grounding receipt for the current project").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier","generic").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless the complete entry receipt is ready").option("--json","Emit the versioned machine-readable receipt").action(async t=>ed({...t,operation:"agent bootstrap"}));var Tt=ge.command("project").description("Safe workspace project lifecycle operations");Tt.command("agent-entry [action]").description("Verify canonical-first project entry coverage for supported agent hosts").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier or all","all").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless all selected entry checks are ready").option("--json","Emit the versioned machine-readable receipt").action(async(t,e)=>{let r=t??"verify";if(r!=="verify"){let o=`Unknown project agent-entry action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project agent-entry",code:"project.agent-entry.action.invalid",message:o}),null,2)):(console.log(a$2.red(o)),console.log(a$2.gray(" workspai project agent-entry verify [--for-agent <agent|all>] [--strict] [--json]"))),process.exit(1);}await ed({...e,operation:"project agent-entry verify"});});Tt.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{Hp({json:t.json});});Tt.command("workspace [action]").description("Show or repair the canonical workspace binding for the current Workspai project").option("--workspace <path>","Explicit workspace for relink or validation").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=t??"status";if(!["status","relink"].includes(r)){let o=`Unknown project workspace action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:"project.workspace.action.invalid",message:o}),null,2)):(console.log(a$2.red(`\u274C ${o}`)),console.log(a$2.gray(" npx workspai project workspace [status|relink] [--workspace <path>] [--json]"))),process.exit(1);}try{let o=b$5({startPath:P.resolve(e.project??process.cwd()),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!o||!o.projectPath)throw new a$3("project.workspace.unlinked","No Workspai project metadata was found from the requested path.");let n=r==="relink"||o.source==="registry"||o.recovered?await d$2(o):null,s={schemaVersion:"project-workspace-resolution.v1",status:"resolved",workspacePath:o.workspacePath,projectPath:o.projectPath,source:n?"local-link":o.source,recovered:o.recovered||n!==null,linkPath:n?.linkPath??o.linkPath??P.join(o.projectPath,f$1),nextCommand:"npx workspai workspace intelligence run --for-agent generic --strict --json",pathPolicy:{classification:"machine-local",portable:false,persistence:"forbidden",disclosure:"forbidden",purpose:"runtime-workspace-resolution"}};if(op(s),e.json){console.log(JSON.stringify(s,null,2));return}console.log(a$2.green("\u2714 Project workspace resolved")),console.log(a$2.gray(` Workspace: ${s.workspacePath}`)),console.log(a$2.gray(` Project: ${s.projectPath}`)),console.log(a$2.gray(` Resolution: ${s.source}`)),n&&console.log(a$2.gray(` Local link repaired: ${n.linkPath}`));}catch(o){let n=o instanceof a$3?o:null,s=o instanceof Error?o.message:String(o);e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:n?.code??"project.workspace.resolve.failed",message:s,context:n?.context}),null,2)):console.log(a$2.red(`\u274C ${s}`)),process.exit(1);}});Tt.command("coverage").description("Inspect or run runtime-native test coverage and publish normalized project evidence").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--target <percent>","Required coverage target from 0 to 100","80").option("--run","Run the detected runtime-native coverage command before reading evidence").option("--strict","Return exit 2 when coverage is unavailable or below the selected target").option("--json","Emit machine-readable JSON output").action(async t=>{let e=Number(t.target??80);if(!Number.isFinite(e)||e<0||e>100){let r="--target must be a number from 0 to 100.";t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.target.invalid",message:r}),null,2)):console.log(a$2.red(`\u274C ${r}`)),process.exit(1);}try{let{collectProjectTestCoverage:r}=await import('./project-test-coverage-4BGDDBBL.js'),o=await r({projectPath:t.project,target:e,run:t.run===true});if(t.json)console.log(JSON.stringify(o,null,2));else {let s=o.metrics[o.target.metric]?.percent,i=s==null?"unavailable":`${s}%`,c=o.status==="passed"?a$2.green:o.status==="failed"?a$2.red:a$2.yellow;if(console.log(c(`Project coverage: ${o.status}`)),console.log(a$2.gray(` Project: ${o.project.name}`)),console.log(a$2.gray(` Runtime: ${o.runtime}`)),console.log(a$2.gray(` ${o.target.metric}: ${i} \xB7 target ${o.target.percent}%`)),console.log(a$2.gray(` Evidence: ${o.artifactPaths.project}`)),o.lowCoverageFiles.length>0){console.log(a$2.gray(" Lowest coverage files:"));for(let p of o.lowCoverageFiles.slice(0,10))console.log(a$2.gray(` \u2022 ${p.path}: ${p.percent===null?"unknown":`${p.percent}%`} (${p.uncovered} uncovered)`));}for(let p of o.diagnostics)console.log(a$2.gray(` ${p}`));}o.status==="failed"&&process.exit(1),t.strict&&(o.status==="below-target"||o.status==="unavailable")&&process.exit(2);}catch(r){let o=r.message;t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project coverage failed: ${o}`)),process.exit(1);}});Tt.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await os({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(a$2.yellow("No archived projects found."));return}for(let r of e)console.log(a$2.cyan(r.projectName)),console.log(a$2.gray(` Archived: ${r.archivedAt}`)),console.log(a$2.gray(` Path: ${r.archivePath}`)),r.reason&&console.log(a$2.gray(` Reason: ${r.reason}`));}catch(e){console.log(a$2.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});Tt.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ns({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?a$2.cyan(`Project archive dry-run: ${r.projectName}`):a$2.green(`\u2714 Project archived: ${r.projectName}`)),console.log(a$2.gray(` From: ${r.projectPath}`)),r.archivePath&&console.log(a$2.gray(` To: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project archive",code:"project.archive.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project archive failed: ${o}`)),process.exit(1);}});Tt.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await wl({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?a$2.cyan(`Project restore dry-run: ${r.projectName}`):a$2.green(`\u2714 Project restored: ${r.projectName}`)),console.log(a$2.gray(` From: ${r.archivePath}`)),console.log(a$2.gray(` To: ${r.projectPath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project restore",code:"project.restore.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project restore failed: ${o}`)),process.exit(1);}});Tt.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await yl({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}let o=r.action==="archive"?"archived":"deleted";console.log(r.dryRun?a$2.cyan(`Project ${o} dry-run: ${r.projectName}`):a$2.green(`\u2714 Project ${o}: ${r.projectName}`)),console.log(a$2.gray(` Path: ${r.projectPath}`)),r.archivePath&&console.log(a$2.gray(` Archive: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project delete",code:"project.delete.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project delete failed: ${o}`)),process.exit(1);}});ge.command(v.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json [mode]","Output JSON: full (default) or summary").option("--fresh","Bypass Doctor project scan cache and refresh live evidence").option("--verbose","Show every probe, lifecycle capability, and detailed project signal").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate an action or lifecycle plan without applying or executing changes").option("--apply","Apply remediation plan non-interactively").option("--runtime <runtime>","Filter Doctor capability truth by runtime family").option("--framework <framework>","Filter Doctor capability truth by framework").option("--validate","Run the versioned Doctor disease validation corpus").option("--write","Write Doctor capability/validation artifacts inside the workspace").action(async(t,e)=>{if(t&&t!=="workspace"&&t!=="project"&&t!=="capabilities"&&(console.log(a$2.red(`Unknown doctor scope: ${t}`)),console.log(a$2.gray("Available: workspace, project, capabilities")),console.log(a$2.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project | npx workspai doctor capabilities")),process.exit(1)),typeof e.json=="string"&&!["full","summary"].includes(e.json)&&(console.log(a$2.red(`Invalid Doctor JSON mode: ${e.json}. Use full or summary.`)),process.exit(1)),t==="capabilities"){(e.fix||e.plan||e.apply||e.project)&&(console.log(a$2.red("Doctor capability inspection cannot be combined with repair or project-scope flags.")),process.exit(1));let{runDoctorCapabilities:i}=await import('./capabilities-command-NFGX42CH.js'),c=await i({runtime:e.runtime,framework:e.framework,validate:e.validate===true,write:e.write===true,workspace:typeof e.workspace=="string"?e.workspace:void 0,json:!!e.json});c!==0&&process.exit(c);return}(e.runtime||e.framework||e.validate||e.write)&&(console.log(a$2.red('Doctor capability flags require the "doctor capabilities" scope.')),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(a$2.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let r=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!r.has(e.profile)&&(console.log(a$2.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let o=await ig({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(a$2.yellow("\u26A0\uFE0F Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(a$2.gray(` Candidate: ${o.candidatePath}`)),console.log(a$2.gray(" Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(a$2.gray(" If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-WYBSI3GC.js'),s=await n({...e,json:e.json==="summary"?"summary":!!e.json,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});s!==0&&process.exit(s);});ge.command(v.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
377
+ \u274C An unexpected error occurred:`),console.error(r)),process.exit(1);}finally{$t=null;}});zc(ge);Dl(ge);tl(ge);Tl(ge);ge.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{ag({json:t.json});});ge.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:r}=await import('./analyze-WC2TY5AT.js'),o=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(o,null,2)):r(o),o.summary.verdict==="blocked"&&process.exit(2);}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:"analyze",code:"analyze.failed",message:r}),null,2)):console.error(a$2.red(`Analyze failed: ${r}`)),process.exit(1);}});Ic(ge);ge.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(a$2.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function r(p){let d=p;for(;;){let h=u(d,"context.json").find(f=>I.existsSync(f));if(h)return h;let u$1=P.dirname(d);if(u$1===d)break;d=u$1;}return null}let o$1=r(e);function n(p){let d=p;for(;;){let h=P.join(d,".venv"),u=[P.join(d,".workspai","activate"),P.join(d,".rapidkit","activate")].find(v=>I.existsSync(v))??P.join(d,".workspai","activate");if(I.existsSync(u)||I.existsSync(h))return {venv:h,activateFile:u};let f=P.dirname(d);if(f===d)break;d=f;}return null}let s=n(e);!o$1&&!s&&(console.log(a$2.yellow(Vl(e))),process.exit(1));let i;s&&I.existsSync(s.activateFile)?i=s.activateFile:s&&I.existsSync(s.venv)?i=o(s.venv):(console.log(a$2.yellow("No virtual environment found")),process.exit(1));let c=b$3();console.log(c?`call "${i}"`:`. "${i}"`);});ge.command(v.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$4({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});ge.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(a$2.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:r}=await import('./pipeline-NSPPWD7U.js');await r({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});ge.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(a$2.red(`Unknown autopilot action: ${t}`)),console.log(a$2.gray("Available: release")),process.exit(1));let r=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(r)||(console.log(a$2.red(`Invalid autopilot mode: ${e.mode}`)),console.log(a$2.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let o=Ds({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-LJDRECFW.js'),s;try{s=await n({workspacePath:process.cwd(),mode:r,since:e.since,parallel:e.parallel===true,maxWorkers:o,json:e.json===true,output:e.output});}catch(i){let c=i instanceof Error?i.message:String(i);console.log(a$2.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(s,null,2)),s.summary.exitCode!==0&&process.exit(s.summary.exitCode);});ge.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Us(t,e);r!==0&&process.exit(r);});ge.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (defaults to nearest or managed default)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Zp(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});r!==0&&process.exit(r);});ge.command("goal [intent]").description("Compile a plain-language engineering intent into a governed, evidence-bound Goal Pack").option("--workspace <path>","Explicit canonical workspace path").option("--scope <scope>","Bound the Goal to workspace, project:<name>, or projects:<name>,<name>").addOption(new Option("--runtime <runtime>","Bind a coverage Goal to a canonical runtime in its scope").choices(["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"])).addOption(new Option("--for-agent <consumer>","Portable handoff consumer").choices(["generic","claude","codex"]).default("generic")).option("--max-attempts <count>","Maximum bounded proposal attempts","5").option("--refresh","Refresh the canonical Workspace Intelligence chain before planning").option("--dry-run","Validate and preview the Goal Pack without writing artifacts").option("--status [goal-id]","Inspect the active or named Goal Pack and validate its bindings").option("--list","List registered Goal Packs in the resolved workspace").option("--activate <goal-id>","Make a registered Goal Pack the active agent objective").option("--cancel <goal-id>","Cancel a registered Goal Pack without deleting evidence").option("--prepare <goal-id>","Create and link the deterministic CLI verification contract").option("--verify <goal-id>","Run CLI-owned verification for a prepared Goal Pack").option("--no-run","Read verification evidence without executing producer commands").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let{validateGoalCommandSelection:r}=await import('./goal-command-contract-43E22XQD.js'),o=r({intent:t,...e});if(o.operation!=="plan"){let u=b$5({startPath:process.cwd(),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!u)throw new Error("No canonical Workspai workspace could be resolved.");let{buildGoalLifecycleResult:f,inspectGoalLifecycle:v,prepareGoalVerification:k,transitionGoalLifecycle:E,verifyGoalLifecycle:S}=await import('./goal-lifecycle-BIX2JVNO.js'),$=e.prepare?await k({workspacePath:u.workspacePath,goalId:e.prepare}):null,l=e.verify?await S({workspacePath:u.workspacePath,goalId:e.verify,run:e.run!==false}):null,m=e.activate?await E({workspacePath:u.workspacePath,goalId:e.activate,action:"activate"}):e.cancel?await E({workspacePath:u.workspacePath,goalId:e.cancel,action:"cancel"}):null,y=await v({workspacePath:u.workspacePath,goalId:typeof e.status=="string"?e.status:m?.goal.id??$?.goal.id??l?.goal.id,validateBindings:!(e.list||e.cancel)}),w=f({operation:o.operation,activeGoalId:y.index.activeGoalId,goal:y.active,goals:y.index.goals,goalPack:y.goalPack,verifiedGoalId:l?.verifiedGoalId??$?.verifiedGoalId??null,verification:l?.verification??null});if(e.json)console.log(JSON.stringify(w,null,2));else if(e.list){console.log(a$2.bold(`Goals \xB7 ${y.index.goals.length}`));for(let g of y.index.goals)console.log(`${g.id===y.index.activeGoalId?a$2.green("\u25CF"):a$2.gray("\u25CB")} ${g.objective} \xB7 ${g.lifecycle} \xB7 ${g.state}`);}else y.active?(console.log(a$2.bold(y.active.objective)),console.log(a$2.gray(` Goal: ${y.active.id}`)),console.log(a$2.gray(` Lifecycle: ${y.active.lifecycle}`)),console.log(a$2.gray(` Planning state: ${y.active.state}`))):console.log(a$2.yellow("No active Goal Pack is registered."));return}let n=Number(e.maxAttempts??5),{planGoalPack:s}=await import('./goal-pack-SUWH6K7U.js'),c=e.json!==true&&process.stdin.isTTY===true&&process.stdout.isTTY===true?await import('./goal-interactive-selection-6YJOK4WC.js'):null,p=await s({startPath:process.cwd(),intent:o.intent,workspacePath:e.workspace,scope:e.scope,runtime:e.runtime,consumer:e.forAgent,maxAttempts:n,refresh:e.refresh===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),...c?{selectScope:c.selectGoalScopeInteractively,selectCoverageRuntime:c.selectGoalCoverageRuntimeInteractively}:{}});if(e.json){console.log(JSON.stringify(p,null,2));return}let d=p.goalPack,h=d.state==="ready-to-plan"?a$2.green("\u2714 Governed Goal Pack ready to plan"):d.state==="blocked"?a$2.red("\u25A0 Goal Pack blocked by missing bounded evidence"):d.state==="needs-evidence"?a$2.yellow("\u25C6 Goal Pack needs measurement evidence"):a$2.yellow("\u25C6 Goal Pack needs clarification");console.log(h),console.log(a$2.bold(` ${d.intent.statement}`)),console.log(a$2.gray(` Goal: ${d.id}`)),console.log(a$2.gray(` Scope: ${d.scope.kind} \xB7 ${d.scope.projects.length} project(s) \xB7 ${d.baseline.runtimes.length} runtime(s)`)),console.log(a$2.gray(` Evidence: ${d.baseline.graph.entities} entities \xB7 ${d.baseline.graph.relationships} relationships \xB7 ${d.baseline.graph.proofCoveragePercent}% relation proof coverage`)),console.log(a$2.gray(" Mutation: proposal only \xB7 explicit approval \xB7 CLI-owned verify/rollback")),d.decision&&console.log(a$2.yellow(` Decision: ${d.decision.question}`)),p.dryRun?console.log(a$2.cyan(" Preview only; no artifacts were written.")):(console.log(a$2.gray(` Goal Pack: ${d.artifacts.goalPack}`)),console.log(a$2.gray(` Agent handoff: ${d.artifacts.agentHandoff}`))),console.log(a$2.gray(` Next: ${d.commands.planVerifiedGoal??d.commands.inspectGraph}`));}catch(r){let o=r instanceof Error?r.message:String(r),n=e.verify?"verify":e.prepare?"prepare":e.activate?"activate":e.cancel?"cancel":e.list?"list":e.status!==void 0?"status":null;e.json?console.log(JSON.stringify(c$1({operation:n?`goal.${n}`:"goal.plan",code:n?`goal.${n}.failed`:"goal.plan.failed",message:o,context:{scope:e.scope??null,runtime:e.runtime??null,refresh:e.refresh===true,goalId:e.prepare??e.verify??e.activate??e.cancel??(typeof e.status=="string"?e.status:null)}}),null,2)):console.log(a$2.red(`\u274C Goal ${n?`${n} operation`:"planning"} failed: ${o}`)),process.exit(1);}});var fn=ge.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");fn.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await To({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(a$2.green(`\u2714 Workspace snapshot created: ${r.manifest.name}`)),console.log(a$2.gray(` Mode: ${r.manifest.mode}`)),console.log(a$2.gray(` Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot create",code:"snapshot.create.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t??null}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot create failed: ${r.message}`)),process.exit(1);}});fn.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await pl({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(a$2.yellow("No workspace snapshots found."));return}for(let r of e)console.log(a$2.cyan(r.name)),console.log(a$2.gray(` ${r.createdAt} | ${r.mode} | ${r.projects.length} project(s)`)),console.log(a$2.gray(` ${r.snapshotPath}`));}catch(e){t.json&&(console.log(JSON.stringify(c$1({operation:"snapshot list",code:"snapshot.list.failed",message:e.message,context:{workspacePath:t.workspace??null}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});fn.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ll({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(a$2.cyan(`Snapshot: ${r.manifest.name}`)),console.log(a$2.gray(` Mode: ${r.manifest.mode}`)),console.log(a$2.gray(` Created: ${r.manifest.createdAt}`)),console.log(a$2.gray(` Projects: ${r.manifest.projects.length}`)),console.log(a$2.gray(` Files: ${r.estimatedFileCount}`)),console.log(a$2.gray(` Bytes: ${r.estimatedBytes}`)),console.log(a$2.gray(` Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot inspect",code:"snapshot.inspect.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot inspect failed: ${r.message}`)),process.exit(1);}});fn.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ul({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(r,null,2));return}r.dryRun?console.log(a$2.cyan(`Snapshot restore dry-run: ${t}`)):console.log(a$2.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(a$2.gray(` Snapshot: ${r.snapshotPath}`)),console.log(a$2.gray(` Restored paths: ${r.restoredPaths.join(", ")}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot restore",code:"snapshot.restore.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C Snapshot restore failed: ${r.message}`)),process.exit(1);}});function _g(t){return (t instanceof Error?t.message:String(t)).replace(/file:\/\/\/[^\s"']+/g,"<local-path>").replace(/\\\\[^\\\s"']+[\\][^\s"']+/g,"<local-path>").replace(/[A-Za-z]:[\\/][^\s"']+/g,"<local-path>").replace(/\/(?:Users|home|private|var|opt|srv|mnt|Volumes|tmp)\/[^\s"']+/g,"<local-path>")}async function ed(t){try{let{buildAgentBootstrapReceipt:e}=await import('./project-agent-entry-Y3NEHZED.js'),r=await e({startPath:t.project,forAgent:t.forAgent,validateLiveInputs:t.liveInputs!==false});if(t.json)console.log(JSON.stringify(r,null,2));else {let o=r.status==="ready"?a$2.green:r.status==="degraded"?a$2.yellow:a$2.red;console.log(o(`Agent entry: ${r.status}`)),console.log(a$2.gray(` Project: ${r.project.name}`)),console.log(a$2.gray(` Workspace: ${r.workspace.name}`)),console.log(a$2.gray(` Consumer: ${r.resolvedHost}`)),console.log(a$2.gray(` Receipt: ${r.receiptId.slice(0,16)}`));for(let n of r.checks.filter(s=>s.status!=="passed"))console.log((n.status==="failed"?a$2.red:a$2.yellow)(` ${n.id}: ${n.message}`));console.log(a$2.gray(` Next: ${r.nextActions[0]}`));}(r.status==="blocked"||t.strict&&r.status!=="ready")&&process.exit(2);}catch(e){let r=_g(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"agent.entry.bootstrap.failed",message:r}),null,2)):console.log(a$2.red(`Agent entry failed: ${r}`)),process.exit(1);}}var Ig=ge.command("agent").description("Bootstrap coding agents from canonical Workspai project evidence");Ig.command("bootstrap").description("Issue a portable canonical-first grounding receipt for the current project").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier","generic").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless the complete entry receipt is ready").option("--json","Emit the versioned machine-readable receipt").action(async t=>ed({...t,operation:"agent bootstrap"}));var Tt=ge.command("project").description("Safe workspace project lifecycle operations");Tt.command("agent-entry [action]").description("Verify canonical-first project entry coverage for supported agent hosts").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier or all","all").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless all selected entry checks are ready").option("--json","Emit the versioned machine-readable receipt").action(async(t,e)=>{let r=t??"verify";if(r!=="verify"){let o=`Unknown project agent-entry action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project agent-entry",code:"project.agent-entry.action.invalid",message:o}),null,2)):(console.log(a$2.red(o)),console.log(a$2.gray(" workspai project agent-entry verify [--for-agent <agent|all>] [--strict] [--json]"))),process.exit(1);}await ed({...e,operation:"project agent-entry verify"});});Tt.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{Hp({json:t.json});});Tt.command("workspace [action]").description("Show or repair the canonical workspace binding for the current Workspai project").option("--workspace <path>","Explicit workspace for relink or validation").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=t??"status";if(!["status","relink"].includes(r)){let o=`Unknown project workspace action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:"project.workspace.action.invalid",message:o}),null,2)):(console.log(a$2.red(`\u274C ${o}`)),console.log(a$2.gray(" npx workspai project workspace [status|relink] [--workspace <path>] [--json]"))),process.exit(1);}try{let o=b$5({startPath:P.resolve(e.project??process.cwd()),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!o||!o.projectPath)throw new a$3("project.workspace.unlinked","No Workspai project metadata was found from the requested path.");let n=r==="relink"||o.source==="registry"||o.recovered?await d$2(o):null,s={schemaVersion:"project-workspace-resolution.v1",status:"resolved",workspacePath:o.workspacePath,projectPath:o.projectPath,source:n?"local-link":o.source,recovered:o.recovered||n!==null,linkPath:n?.linkPath??o.linkPath??P.join(o.projectPath,f$1),nextCommand:"npx workspai workspace intelligence run --for-agent generic --strict --json",pathPolicy:{classification:"machine-local",portable:false,persistence:"forbidden",disclosure:"forbidden",purpose:"runtime-workspace-resolution"}};if(op(s),e.json){console.log(JSON.stringify(s,null,2));return}console.log(a$2.green("\u2714 Project workspace resolved")),console.log(a$2.gray(` Workspace: ${s.workspacePath}`)),console.log(a$2.gray(` Project: ${s.projectPath}`)),console.log(a$2.gray(` Resolution: ${s.source}`)),n&&console.log(a$2.gray(` Local link repaired: ${n.linkPath}`));}catch(o){let n=o instanceof a$3?o:null,s=o instanceof Error?o.message:String(o);e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:n?.code??"project.workspace.resolve.failed",message:s,context:n?.context}),null,2)):console.log(a$2.red(`\u274C ${s}`)),process.exit(1);}});Tt.command("coverage").description("Inspect or run runtime-native test coverage and publish normalized project evidence").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--target <percent>","Required coverage target from 0 to 100","80").option("--run","Run the detected runtime-native coverage command before reading evidence").option("--strict","Return exit 2 when coverage is unavailable or below the selected target").option("--json","Emit machine-readable JSON output").action(async t=>{let e=Number(t.target??80);if(!Number.isFinite(e)||e<0||e>100){let r="--target must be a number from 0 to 100.";t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.target.invalid",message:r}),null,2)):console.log(a$2.red(`\u274C ${r}`)),process.exit(1);}try{let{collectProjectTestCoverage:r}=await import('./project-test-coverage-5PXAHBYQ.js'),o=await r({projectPath:t.project,target:e,run:t.run===true});if(t.json)console.log(JSON.stringify(o,null,2));else {let s=o.metrics[o.target.metric]?.percent,i=s==null?"unavailable":`${s}%`,c=o.status==="passed"?a$2.green:o.status==="failed"?a$2.red:a$2.yellow;if(console.log(c(`Project coverage: ${o.status}`)),console.log(a$2.gray(` Project: ${o.project.name}`)),console.log(a$2.gray(` Runtime: ${o.runtime}`)),console.log(a$2.gray(` ${o.target.metric}: ${i} \xB7 target ${o.target.percent}%`)),console.log(a$2.gray(` Evidence: ${o.artifactPaths.project}`)),o.lowCoverageFiles.length>0){console.log(a$2.gray(" Lowest coverage files:"));for(let p of o.lowCoverageFiles.slice(0,10))console.log(a$2.gray(` \u2022 ${p.path}: ${p.percent===null?"unknown":`${p.percent}%`} (${p.uncovered} uncovered)`));}for(let p of o.diagnostics)console.log(a$2.gray(` ${p}`));}o.status==="failed"&&process.exit(1),t.strict&&(o.status==="below-target"||o.status==="unavailable")&&process.exit(2);}catch(r){let o=r.message;t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project coverage failed: ${o}`)),process.exit(1);}});Tt.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await os({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(a$2.yellow("No archived projects found."));return}for(let r of e)console.log(a$2.cyan(r.projectName)),console.log(a$2.gray(` Archived: ${r.archivedAt}`)),console.log(a$2.gray(` Path: ${r.archivePath}`)),r.reason&&console.log(a$2.gray(` Reason: ${r.reason}`));}catch(e){console.log(a$2.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});Tt.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ns({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?a$2.cyan(`Project archive dry-run: ${r.projectName}`):a$2.green(`\u2714 Project archived: ${r.projectName}`)),console.log(a$2.gray(` From: ${r.projectPath}`)),r.archivePath&&console.log(a$2.gray(` To: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project archive",code:"project.archive.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project archive failed: ${o}`)),process.exit(1);}});Tt.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await wl({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?a$2.cyan(`Project restore dry-run: ${r.projectName}`):a$2.green(`\u2714 Project restored: ${r.projectName}`)),console.log(a$2.gray(` From: ${r.archivePath}`)),console.log(a$2.gray(` To: ${r.projectPath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project restore",code:"project.restore.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project restore failed: ${o}`)),process.exit(1);}});Tt.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await yl({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}let o=r.action==="archive"?"archived":"deleted";console.log(r.dryRun?a$2.cyan(`Project ${o} dry-run: ${r.projectName}`):a$2.green(`\u2714 Project ${o}: ${r.projectName}`)),console.log(a$2.gray(` Path: ${r.projectPath}`)),r.archivePath&&console.log(a$2.gray(` Archive: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(a$2.gray(` Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project delete",code:"project.delete.failed",message:o}),null,2)):console.log(a$2.red(`\u274C Project delete failed: ${o}`)),process.exit(1);}});ge.command(v.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json [mode]","Output JSON: full (default) or summary").option("--fresh","Bypass Doctor project scan cache and refresh live evidence").option("--verbose","Show every probe, lifecycle capability, and detailed project signal").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate an action or lifecycle plan without applying or executing changes").option("--apply","Apply remediation plan non-interactively").option("--runtime <runtime>","Filter Doctor capability truth by runtime family").option("--framework <framework>","Filter Doctor capability truth by framework").option("--validate","Run the versioned Doctor disease validation corpus").option("--write","Write Doctor capability/validation artifacts inside the workspace").action(async(t,e)=>{if(t&&t!=="workspace"&&t!=="project"&&t!=="capabilities"&&(console.log(a$2.red(`Unknown doctor scope: ${t}`)),console.log(a$2.gray("Available: workspace, project, capabilities")),console.log(a$2.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project | npx workspai doctor capabilities")),process.exit(1)),typeof e.json=="string"&&!["full","summary"].includes(e.json)&&(console.log(a$2.red(`Invalid Doctor JSON mode: ${e.json}. Use full or summary.`)),process.exit(1)),t==="capabilities"){(e.fix||e.plan||e.apply||e.project)&&(console.log(a$2.red("Doctor capability inspection cannot be combined with repair or project-scope flags.")),process.exit(1));let{runDoctorCapabilities:i}=await import('./capabilities-command-NFGX42CH.js'),c=await i({runtime:e.runtime,framework:e.framework,validate:e.validate===true,write:e.write===true,workspace:typeof e.workspace=="string"?e.workspace:void 0,json:!!e.json});c!==0&&process.exit(c);return}(e.runtime||e.framework||e.validate||e.write)&&(console.log(a$2.red('Doctor capability flags require the "doctor capabilities" scope.')),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(a$2.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let r=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!r.has(e.profile)&&(console.log(a$2.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let o=await ig({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(a$2.yellow("\u26A0\uFE0F Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(a$2.gray(` Candidate: ${o.candidatePath}`)),console.log(a$2.gray(" Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(a$2.gray(" If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-LQ7FT6AZ.js'),s=await n({...e,json:e.json==="summary"?"summary":!!e.json,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});s!==0&&process.exit(s);});ge.command(v.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
378
378
  workspace run <stage> \u2014 fleet stage execution across discovered projects
379
379
  stages: init | test | build | start | <custom-from-context>
380
380
  workspace explain|why \u2014 blocker/project narrative (--write for artifact)
@@ -390,18 +390,18 @@ Workspace Actions:
390
390
  Fleet lifecycle run | init
391
391
 
392
392
  Use "workspai commands --json" for the contract-backed runtime inventory.
393
- See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,r,o){let n=this.opts(),s=l=>{let m=n.workspace?P.resolve(n.workspace):null,y=null,w=null;try{y=b$5({startPath:process.cwd(),explicitWorkspacePath:m,strict:true})?.workspacePath??null;}catch(x){if(x instanceof a$3)w=x;else throw x}if(!y||!Ze(y)){let x=w?.message??"Not inside a Workspai workspace. Run from a workspace/project directory or pass --workspace <path>.";(n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${l}`,code:w?.code??"workspace.root.required",message:x,context:{cwd:P.resolve(process.cwd()),...m?{requestedWorkspace:m}:{},...w?.context??{}}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C ${x}`)),console.log(a$2.gray("\u{1F4A1} Run from a workspace/project directory, or pass --workspace <path> to resolve ambiguity.")),process.exit(1);}let g=P.resolve(process.cwd()),C=P.resolve(y);return g!==C&&!n.json&&console.log(a$2.gray(`\u2139 Using workspace root ${y} for "${l}" (current directory: ${g}).`)),y},i=l=>process.argv.includes(l),c=l=>Fe(process.argv,l),p$1=()=>n.output||c("--output"),d=()=>{if(!n.scanDepth)return;let l=Number.parseInt(n.scanDepth,10);return Number.isFinite(l)?l:void 0},h=(l,m,y)=>{if(l===void 0)return;let w=Number.parseInt(l,10);if(!Number.isFinite(w)||w<1||w>y)throw new Error(`${m} must be an integer between 1 and ${y}.`);return w},u=()=>({...n.graphInventoryLimit!==void 0?{inventoryFileLimitPerProject:h(n.graphInventoryLimit,"--graph-inventory-limit",2e6)}:{},...n.graphSemanticBudget!==void 0?{semanticFilesPerProject:h(n.graphSemanticBudget,"--graph-semantic-budget",25e4)}:{},...n.graphDeepBudget!==void 0?{maxFilesPerProject:h(n.graphDeepBudget,"--graph-deep-budget",1e5)}:{},...n.graphSourceBudget!==void 0?{sourceFilesPerProject:h(n.graphSourceBudget,"--graph-source-budget",5e4)}:{}}),f=(l,m)=>{if(!l)return;let y=l.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!y)throw new Error(`${m} must be a byte size such as 500gb or 2tb.`);let w={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},g=Number(y[1])*w[y[2]||"b"];if(!Number.isSafeInteger(Math.floor(g))||g<=0)throw new Error(`${m} is outside the supported numeric range.`);return Math.floor(g)},v=()=>{let l=n.downloadTimeoutMs,m=l===void 0?void 0:Number.parseInt(l,10);if(m!==void 0&&(!Number.isFinite(m)||m<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:f(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:f(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:m,allowPrivateNetwork:n.allowPrivateNetwork===true||i("--allow-private-network")}},k=new Set(Object.values(Kr).flatMap(l=>[...l.flags])),E=new Set(process.argv.slice(2).filter(l=>l.startsWith("--")).map(l=>l.split("=",1)[0]).filter(l=>k.has(l))),S=Kr[t]?.flags,$=S?[...E].filter(l=>!S.includes(l)):[];if($.length>0){let l=`${$.join(", ")} ${$.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||E.has("--json")?console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:l,exitCode:2,context:{action:t,unsupportedFlags:$,allowedFlags:S}}),null,2)):(console.log(a$2.red(`\u274C ${l}`)),console.log(a$2.gray(` Allowed flags: ${S.join(", ")||"none"}`))),process.exit(2);}if((Hl(t)||t==="trace"||t==="feedback"||t==="mcp")&&c$2({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||i("--json"),strict:n.strict===true||i("--strict")}}),t==="list"){let{listWorkspaces:l}=await import('./workspace-E3MM3AIE.js');await l({json:n.json===true||i("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(a$2.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(a$2.gray(" npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let l=s("intelligence"),{runWorkspaceIntelligenceChain:m}=await import('./workspace-intelligence-runner-FPPKTSNK.js'),y=await m({workspacePath:l,strict:n.strict===true||i("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||i("--json"))console.log(JSON.stringify(y,null,2));else {console.log(a$2.green(`\u2714 Workspace Intelligence: ${y.status}`));for(let w of y.stages)console.log(a$2.gray(` ${w.id}: ${w.status} \u2014 ${w.message}`));console.log(a$2.gray(` Evidence: ${y.artifactPath}`));}y.exitCode!==0&&process.exit(y.exitCode);}else if(t==="model"){let l=s("model"),{buildWorkspaceModelCached:m,buildWorkspaceModelIncremental:y,createWorkspaceModelBuildProvenance:w,writeWorkspaceModel:g}=await import('./workspace-model-5FA2636K.js'),C=n.incremental===true||i("--incremental"),x=n.cache===true||i("--cache")||C,R={workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d(),strict:n.strict===true||i("--strict")},b,T;if(C){let O=await y(R);b=O.model,T=O.mode;}else {let O=await m({...R,cache:x});b=O.model,T=O.cache;}b={...b,build:w({mode:C?"incremental":x?"cache":"full",engineStatus:T})};let j;(n.write===true||i("--write"))&&(j=await g(b,l));let A=(n.strict===true||i("--strict"))&&b.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...b,...j?{outputPath:j}:{}},null,2)),A&&process.exit(1);return}console.log(a$2.green(`\u2714 Workspace model: ${b.workspace.name}`)),C?console.log(a$2.gray(` Build: ${T} (incremental)`)):x&&console.log(a$2.gray(` Cache: ${T}`)),console.log(a$2.gray(` Projects: ${b.summary.projectCount}`)),console.log(a$2.gray(` Runtimes: ${b.summary.runtimes.join(", ")||"none"}`)),console.log(a$2.gray(` Frameworks: ${b.summary.frameworks.join(", ")||"none"}`)),console.log(a$2.gray(` Workspace type: ${b.identity.workspaceType}`)),console.log(a$2.gray(` Validation: ${b.validation?.status??"unknown"} (${b.validation?.errors??0} error, ${b.validation?.warnings??0} warning)`)),console.log(j?a$2.gray(` Written: ${j}`):a$2.gray(" Add --write to persist .workspai/reports/workspace-model.json")),A&&process.exit(1);}else if(t==="agent-sync"){let l=s("agent-sync"),{syncWorkspaceAgentGrounding:m,parseAgentGroundingTargets:y}=await import('./workspace-agent-sync-NBIOSXCG.js'),w=n.strict===true||i("--strict"),g=n.write===true||i("--write"),C=i("--dry-run"),x=await m({workspacePath:l,scope:n.scope,agent:n.forAgent,write:g&&!C,dryRun:C,strict:w,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||i("--refresh-context")||i("--refresh"),targets:y(n.target),experimentalHooks:n.experimentalHooks===true||i("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||i("--hydrate-prompts"),projectGrounding:n.projectGrounding??"managed",staleAfterHours:24});if(n.json)console.log(JSON.stringify(x,null,2));else {console.log(a$2.green(`\u2714 Agent grounding ${g&&!C?"synced":"planned"}`)),console.log(a$2.gray(` Index: ${x.indexPath}`)),x.contextPath&&console.log(a$2.gray(` Context: ${x.contextPath}`)),x.blockers.length>0&&console.log(a$2.yellow(` Blockers: ${x.blockers.slice(0,3).join(" \xB7 ")}`));let R=g&&!C?x.writtenFiles:x.skippedFiles;if(R.length>0&&console.log(a$2.gray(` Files: ${R.join(", ")}`)),x.strictViolations.length>0)for(let b of x.strictViolations)console.log(a$2.red(`\u274C ${b}`));}w&&x.strictViolations.length>0&&process.exit(1);}else if(t==="repair"){let l=e??"status",{approveWorkspaceRepair:m,cancelWorkspaceRepair:y,decideWorkspaceRepair:w,executeWorkspaceRepair:g,inspectWorkspaceRepairCapabilities:C,listWorkspaceRepairTransactions:x,planWorkspaceRepair:R,planWorkspaceRepairProposal:b,readWorkspaceRepairTransaction:T,rollbackWorkspaceRepair:j}=await import('./workspace-repair-engine-4JTNNDZL.js');if(l==="capabilities"){let H;if(n.workspace)H=s("repair capabilities");else try{let oe=b$5({startPath:process.cwd(),strict:false})?.workspacePath;oe&&Ze(oe)&&(H=oe);}catch{}let ie=await C(H?{workspacePath:H,project:n.project}:n.project?{project:n.project}:{});if(n.json===true||i("--json"))console.log(JSON.stringify(ie,null,2));else {console.log(a$2.green(`\u2714 Workspace repair adapters: ${ie.adapters.length}`));for(let oe of ie.adapters)console.log(a$2.gray(` ${oe.id.padEnd(14)} ${oe.support.padEnd(11)} ${oe.ecosystem}`));console.log(a$2.gray(" Missing tools and unsupported ecosystems fail closed."));}return}let A=s("repair"),O=n.transaction??(["plan","propose","capabilities"].includes(l)?void 0:r),J=()=>{if(!O?.trim())throw new Error(`workspace repair ${l} requires --transaction <id> (or the id as the next positional argument).`);return O.trim()},F;if(l==="plan"){let H=n.card??r;if(!H?.trim())throw new Error("workspace repair plan requires --card <id>.");F=await R({workspacePath:A,cardId:H.trim(),actionId:n.actionId,projectName:n.project,maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(l==="propose"){let H=n.proposal??r;if(!H?.trim())throw new Error("workspace repair propose requires --proposal <path>.");let ie=P.resolve(A,H.trim()),oe=P.relative(A,ie);if(oe.startsWith("..")||P.isAbsolute(oe))throw new Error("The repair proposal file must be inside the canonical workspace.");let he=await M__default.lstat(ie).catch(()=>{});if(!he?.isFile()||he.isSymbolicLink()||he.size>25*1024*1024)throw new Error("The repair proposal must be a regular JSON file no larger than 25 MiB.");F=await b({workspacePath:A,proposal:await M__default.readJson(ie),maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(l==="approve")F=await m({workspacePath:A,transactionId:J(),approvedBy:n.approvedBy});else if(l==="decide"){if(!n.decision)throw new Error("workspace repair decide requires --decision <choice>.");F=await w({workspacePath:A,transactionId:J(),decision:n.decision});}else if(l==="execute"||l==="resume")F=await g({workspacePath:A,transactionId:J()});else if(l==="status")F=await T({workspacePath:A,transactionId:J()});else if(l==="list")F=await x(A);else if(l==="rollback")F=await j({workspacePath:A,transactionId:J()});else if(l==="cancel")F=await y({workspacePath:A,transactionId:J()});else throw new Error(`Unknown workspace repair action: ${l}. Available: capabilities, plan, propose, approve, decide, execute, resume, status, list, rollback, cancel.`);let U=P.join(A,p.repairTransaction);if(n.json===true||i("--json"))console.log(JSON.stringify(b$6(`workspace repair ${l}`,F,U),null,2));else if(Array.isArray(F)){console.log(a$2.green(`\u2714 Workspace repair transactions: ${F.length}`));for(let H of F.slice(0,20))console.log(a$2.gray(` ${H.transactionId} \xB7 ${H.target.cardId} \xB7 ${H.state}`));}else {console.log(a$2.green(`\u2714 Workspace repair: ${F.state}`)),console.log(a$2.gray(` Transaction: ${F.transactionId}`)),console.log(a$2.gray(` Target: ${F.target.cardId}`));for(let H of F.stages)console.log(a$2.gray(` ${H.status.padEnd(8)} ${H.kind}: ${H.summary}`));F.decision&&console.log(a$2.yellow(` Decision: ${F.decision.reason}`)),console.log(a$2.gray(` Evidence: ${p.repairTransaction}`));}Array.isArray(F)||(F.state==="decision-required"&&process.exit(2),(F.state==="rolled-back"||F.state==="failed")&&process.exit(1));return}else if(t==="remediation-plan"){let l=s("remediation-plan"),{buildArtifactRemediationPlan:m,writeArtifactRemediationPlan:y}=await import('./artifact-remediation-plan-WDK5ISRU.js'),w=await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),ciMode:n.ci===true||i("--ci")}),g;if((n.write===true||i("--write"))&&(g=await y(w,l)),n.json===true||i("--json")){console.log(JSON.stringify(b$6("workspace remediation-plan",w,g),null,2));return}console.log(a$2.green(`\u2714 Artifact remediation plan: ${w.workspace.name}`)),console.log(a$2.gray(` Artifacts scanned: ${w.summary.artifactsScanned}`)),console.log(a$2.gray(` Cards covered: ${w.summary.cardsCovered}`)),console.log(a$2.gray(` CI mode: ${w.source.ciMode?"yes":"no"}`)),console.log(a$2.gray(` Actions: ${w.summary.totalActions}`)),console.log(a$2.gray(` Risk: safe=${w.summary.risk.safe}, guarded=${w.summary.risk.guarded}, invasive=${w.summary.risk.invasive}`));for(let C of w.actions.slice(0,8))console.log(a$2.gray(` \u2022 ${C.cardId}: ${C.title} (${C.mode}, ${C.risk})`));w.actions.length>8&&console.log(a$2.gray(` \u2026 ${w.actions.length-8} more action(s)`)),console.log(g?a$2.gray(` Written: ${g}`):a$2.gray(" Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let l=s("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(a$2.red("\u274C workspace context currently requires --for-agent")),console.log(a$2.gray(" npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:m,writeWorkspaceAgentContext:y}=await import('./workspace-context-ZDXF6S7S.js'),w=n.strict===true||i("--strict"),g=await m({workspacePath:l,agent:n.forAgent||r||e,scope:n.scope,includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d(),strict:false}),C,x;if((n.write===true||i("--write"))&&(C=await y(g,l),(n.agentSync===true||i("--agent-sync")||n.noAgentSync!==true)&&!i("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:T,parseAgentGroundingTargets:j}=await import('./workspace-agent-sync-NBIOSXCG.js');if(x=await T({workspacePath:l,scope:n.scope,agent:g.agent,write:true,refreshContext:false,strict:w,preset:n.preset==="minimal"?"minimal":"enterprise",targets:j(n.target),projectGrounding:n.projectGrounding??"managed"}),n.json||console.log(a$2.gray(` Agent grounding synced: ${x.writtenFiles.length} file(s) updated`)),w&&x.strictViolations.length>0){for(let A of x.strictViolations)console.log(a$2.red(`\u274C ${A}`));process.exit(1);}}let R=w&&g.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...g,...C?{outputPath:C}:{},...x?{agentGroundingSync:x}:{}},null,2)),R&&process.exit(1);return}if(console.log(a$2.green(`\u2714 Workspace context: ${g.workspace.name}`)),console.log(a$2.gray(` Agent: ${g.agent}`)),console.log(a$2.gray(` Scope: ${g.scope.activeProject??g.scope.requested}`)),console.log(a$2.gray(` Projects included: ${g.projects.length}`)),console.log(a$2.gray(` Safe commands: ${g.safeCommands.length}`)),console.log(a$2.gray(` Validation: ${g.validation.status} (${g.validation.errors} error, ${g.validation.warnings} warning)`)),console.log(C?a$2.gray(` Written: ${C}`):a$2.gray(" Add --write to persist .workspai/reports/workspace-context-agent.json")),R){for(let b of g.validation.issues)console.log(a$2.red(`\u274C ${b.severity}:${b.code}:${b.target}`));process.exit(1);}}else if(t==="snapshot"){let l=s("snapshot"),{buildWorkspaceModelSnapshot:m,writeWorkspaceModelSnapshot:y}=await import('./workspace-intelligence-3IAAM3H3.js'),w=await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),g=await y(w,l);if(n.json){console.log(JSON.stringify(b$6("workspace snapshot",w,g),null,2));return}console.log(a$2.green(`\u2714 Workspace model snapshot: ${w.model.workspace.name}`)),console.log(a$2.gray(` Hash: ${w.modelHash}`)),console.log(a$2.gray(` Projects: ${w.model.summary.projectCount}`)),console.log(a$2.gray(` Workspace type: ${w.model.identity.workspaceType}`)),console.log(a$2.gray(` Written: ${g}`));}else if(t==="diff"){let l=s("diff"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:l},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(a$2.gray(" npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(a$2.gray(" npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(a$2.gray(" npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(a$2.gray(" npx workspai workspace diff --from git --json (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:y,writeWorkspaceModelDiff:w}=await import('./workspace-intelligence-3IAAM3H3.js'),g;try{g=await y({workspacePath:l,fromPath:m,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:R.message,context:{workspacePath:l,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),R}let C=await w(g,l);if(n.json){console.log(JSON.stringify(b$6("workspace diff",g,C),null,2));return}let x=g.summary.changed?a$2.yellow:a$2.green;console.log(x(`\u2714 Workspace model diff: ${g.summary.changed?"changed":"clean"}`)),console.log(a$2.gray(` From: ${g.fromRef}`)),console.log(a$2.gray(` Added projects: ${g.summary.addedProjects}`)),console.log(a$2.gray(` Removed projects: ${g.summary.removedProjects}`)),console.log(a$2.gray(` Changed projects: ${g.summary.changedProjects}`)),console.log(a$2.gray(` Workspace changes: ${g.summary.workspaceChanges}`)),console.log(a$2.gray(` Validation changes: ${g.summary.validationChanges}`)),g.git?.available&&console.log(a$2.gray(` Git: ${g.git.dirty?"dirty":"clean"} (${g.summary.gitChangedFiles} mapped change(s))`));for(let R of g.changes.slice(0,12))console.log(a$2.gray(` \u2022 ${R.type} ${R.target}: ${R.message}`));g.changes.length>12&&console.log(a$2.gray(` \u2026 ${g.changes.length-12} more change(s)`)),console.log(a$2.gray(` Written: ${C}`));}else if(t==="impact"){let l=s("impact"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:l},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(a$2.gray(" npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:y,writeWorkspaceImpact:w}=await import('./workspace-intelligence-3IAAM3H3.js'),g;try{g=await y({workspacePath:l,fromPath:m,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:R.message,context:{workspacePath:l,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),R}let C=await w(g,l);if(n.json){console.log(JSON.stringify(b$6("workspace impact",g,C),null,2));return}let x=g.summary.risk==="critical"||g.summary.risk==="high"?a$2.red:g.summary.risk==="medium"?a$2.yellow:a$2.green;console.log(x(`\u2714 Workspace impact: ${g.summary.risk}`)),console.log(a$2.gray(` From: ${g.fromRef}`)),console.log(a$2.gray(` Affected projects: ${g.summary.affectedProjects}`)),console.log(a$2.gray(` Workspace items: ${g.summary.workspaceItems}`)),console.log(a$2.gray(` Recommended commands: ${g.summary.recommendedCommands}`));for(let R of g.affectedProjects.slice(0,8))console.log(a$2.gray(` \u2022 ${R.title}: ${R.summary}`));g.affectedProjects.length>8&&console.log(a$2.gray(` \u2026 ${g.affectedProjects.length-8} more project(s)`)),console.log(a$2.gray(` Written: ${C}`));}else if(t==="verify"){let l=s("verify"),{buildWorkspaceVerify:m,writeWorkspaceVerify:y,evaluateWorkspaceVerifyGate:w}=await import('./workspace-verify-37QL2JYE.js'),g=await m({workspacePath:l,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),C=await y(g,l),x=w(g,{strict:n.strict===true||i("--strict")}),R=x.exitCode,{recordWorkspaceHistory:b,historyEntryFromVerify:T}=await import('./workspace-history-WWPS4U7H.js');if(await b(l,T(g,x.passed)),n.json){console.log(JSON.stringify(b$6("workspace verify",{...g,gate:x},C,R),null,2)),R!==0&&process.exit(R);return}let j=g.summary.verdict==="ready"?a$2.green:g.summary.verdict==="needs-attention"?a$2.yellow:a$2.red;console.log(j(`\u2714 Workspace verify: ${g.summary.verdict}`)),console.log(a$2.gray(` Freshness: ${g.freshness.verdict}`)),console.log(a$2.gray(` Impact risk: ${g.impact.risk}`)),console.log(a$2.gray(` Steps: ${g.steps.length}`)),console.log(a$2.gray(` Passed ${g.summary.stepsPassed}, warn ${g.summary.stepsWarn}, failed ${g.summary.stepsFailed}, missing ${g.summary.stepsMissing}`));for(let A of g.steps.slice(0,10))console.log(a$2.gray(` \u2022 ${A.id}: ${A.status} \u2014 ${A.message}`));if(g.steps.length>10&&console.log(a$2.gray(` \u2026 ${g.steps.length-10} more step(s)`)),g.policyViolations.length>0){console.log(a$2.gray(` Policy (${g.policyMode}): ${g.policyViolations.length} violation(s)`));for(let A of g.policyViolations.slice(0,5)){let O=A.severity==="error"?a$2.red("\u2717"):a$2.yellow("!");console.log(` ${O} [${A.source}] ${A.code}: ${A.message}`);}}console.log(a$2.gray(` Gate (${x.mode}): ${x.passed?"passed":"blocked"}`));for(let A of x.reasons.slice(0,5))console.log(a$2.red(` \u2717 ${A}`));console.log(a$2.gray(` Written: ${C}`)),R!==0&&process.exit(R);}else if(t==="graph"){let l=s("graph"),{buildWorkspaceModel:m,workspaceModelProjectTopology:y}=await import('./workspace-model-5FA2636K.js'),{buildGraphEmit:w,renderGraphDot:g,renderGraphMermaid:C,explainGraphNode:x}=await import('./workspace-graph-2A5THUCI.js'),R=(e||"emit").toLowerCase(),b=["emit","dot","mermaid","jsonld","graphml","gexf","explain","entities","search","benchmark","benchmark-suite","evidence","path","overlay"];if(!b.includes(R)){let D=`Unknown workspace graph mode '${R}'.`;n.json?console.log(JSON.stringify(c$1({operation:`workspace graph ${R}`,code:"workspace.graph.mode.unsupported",message:D,exitCode:2,context:{mode:R,supportedModes:b},examples:["workspai workspace graph emit --json"]}),null,2)):(console.log(a$2.red(`\u274C ${D}`)),console.log(a$2.gray(` Supported: ${b.join(", ")}`))),process.exit(2);}let T=new Set(["benchmark","benchmark-suite","entities","evidence","path","search"]),j=n.refreshGraph===true||i("--refresh-graph"),A=T.has(R)&&!j?await(await import('./workspace-knowledge-graph-snapshot-MTFTCVFF.js')).readWorkspaceKnowledgeGraphSnapshot(l):null,O=A?.status==="hit"?A.graph:null,J=A?.status==="hit"?A.model:await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),F=y(J);F||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:R,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(a$2.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let U=async()=>{if(O)return O;let{buildWorkspaceKnowledgeGraph:D}=await import('./workspace-knowledge-graph-WNQMNAVL.js'),{hashWorkspaceModel:G}=await import('./workspace-model-hash-ZXYPIGCW.js'),{readWorkspaceContract:ne}=await import('./workspace-contract-E7GVWM7W.js'),te=null;try{te=(await ne({workspacePath:l})).contract;}catch{}return D({...u(),workspacePath:l,workspace:{name:J.workspace.name,...J.workspace.profile?{profile:J.workspace.profile}:{}},projects:J.projects.map(z=>({id:z.name,path:z.path,...z.absolutePath?{absolutePath:z.absolutePath}:{},runtime:z.runtime,runtimeCandidates:z.runtimeCandidates,framework:z.framework,kind:z.kind,category:z.category,...z.governance?{governance:z.governance}:{},...z.kit?{kit:z.kit}:{}})),projectTopology:F,contract:te,now:new Date(J.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:G(J)}})};if(R==="dot"||R==="mermaid"){let D=R==="dot"?g(F):C(F),G=p$1();if(G){let ne=P.resolve(l,G);await M__default.outputFile(ne,`${D}
393
+ See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,r,o){let n=this.opts(),s=l=>{let m=n.workspace?P.resolve(n.workspace):null,y=null,w=null;try{y=b$5({startPath:process.cwd(),explicitWorkspacePath:m,strict:true})?.workspacePath??null;}catch(x){if(x instanceof a$3)w=x;else throw x}if(!y||!Ze(y)){let x=w?.message??"Not inside a Workspai workspace. Run from a workspace/project directory or pass --workspace <path>.";(n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${l}`,code:w?.code??"workspace.root.required",message:x,context:{cwd:P.resolve(process.cwd()),...m?{requestedWorkspace:m}:{},...w?.context??{}}}),null,2)),process.exit(1)),console.log(a$2.red(`\u274C ${x}`)),console.log(a$2.gray("\u{1F4A1} Run from a workspace/project directory, or pass --workspace <path> to resolve ambiguity.")),process.exit(1);}let g=P.resolve(process.cwd()),C=P.resolve(y);return g!==C&&!n.json&&console.log(a$2.gray(`\u2139 Using workspace root ${y} for "${l}" (current directory: ${g}).`)),y},i=l=>process.argv.includes(l),c=l=>Fe(process.argv,l),p$1=()=>n.output||c("--output"),d=()=>{if(!n.scanDepth)return;let l=Number.parseInt(n.scanDepth,10);return Number.isFinite(l)?l:void 0},h=(l,m,y)=>{if(l===void 0)return;let w=Number.parseInt(l,10);if(!Number.isFinite(w)||w<1||w>y)throw new Error(`${m} must be an integer between 1 and ${y}.`);return w},u=()=>({...n.graphInventoryLimit!==void 0?{inventoryFileLimitPerProject:h(n.graphInventoryLimit,"--graph-inventory-limit",2e6)}:{},...n.graphSemanticBudget!==void 0?{semanticFilesPerProject:h(n.graphSemanticBudget,"--graph-semantic-budget",25e4)}:{},...n.graphDeepBudget!==void 0?{maxFilesPerProject:h(n.graphDeepBudget,"--graph-deep-budget",1e5)}:{},...n.graphSourceBudget!==void 0?{sourceFilesPerProject:h(n.graphSourceBudget,"--graph-source-budget",5e4)}:{}}),f=(l,m)=>{if(!l)return;let y=l.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!y)throw new Error(`${m} must be a byte size such as 500gb or 2tb.`);let w={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},g=Number(y[1])*w[y[2]||"b"];if(!Number.isSafeInteger(Math.floor(g))||g<=0)throw new Error(`${m} is outside the supported numeric range.`);return Math.floor(g)},v=()=>{let l=n.downloadTimeoutMs,m=l===void 0?void 0:Number.parseInt(l,10);if(m!==void 0&&(!Number.isFinite(m)||m<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:f(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:f(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:m,allowPrivateNetwork:n.allowPrivateNetwork===true||i("--allow-private-network")}},k=new Set(Object.values(Kr).flatMap(l=>[...l.flags])),E=new Set(process.argv.slice(2).filter(l=>l.startsWith("--")).map(l=>l.split("=",1)[0]).filter(l=>k.has(l))),S=Kr[t]?.flags,$=S?[...E].filter(l=>!S.includes(l)):[];if($.length>0){let l=`${$.join(", ")} ${$.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||E.has("--json")?console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:l,exitCode:2,context:{action:t,unsupportedFlags:$,allowedFlags:S}}),null,2)):(console.log(a$2.red(`\u274C ${l}`)),console.log(a$2.gray(` Allowed flags: ${S.join(", ")||"none"}`))),process.exit(2);}if((Hl(t)||t==="trace"||t==="feedback"||t==="mcp")&&c$2({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||i("--json"),strict:n.strict===true||i("--strict")}}),t==="list"){let{listWorkspaces:l}=await import('./workspace-ROUEA3RT.js');await l({json:n.json===true||i("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(a$2.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(a$2.gray(" npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let l=s("intelligence"),{runWorkspaceIntelligenceChain:m}=await import('./workspace-intelligence-runner-SCB44IXU.js'),y=await m({workspacePath:l,strict:n.strict===true||i("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||i("--json"))console.log(JSON.stringify(y,null,2));else {console.log(a$2.green(`\u2714 Workspace Intelligence: ${y.status}`));for(let w of y.stages)console.log(a$2.gray(` ${w.id}: ${w.status} \u2014 ${w.message}`));console.log(a$2.gray(` Evidence: ${y.artifactPath}`));}y.exitCode!==0&&process.exit(y.exitCode);}else if(t==="model"){let l=s("model"),{buildWorkspaceModelCached:m,buildWorkspaceModelIncremental:y,createWorkspaceModelBuildProvenance:w,writeWorkspaceModel:g}=await import('./workspace-model-XSNLDUI2.js'),C=n.incremental===true||i("--incremental"),x=n.cache===true||i("--cache")||C,R={workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d(),strict:n.strict===true||i("--strict")},b,T;if(C){let O=await y(R);b=O.model,T=O.mode;}else {let O=await m({...R,cache:x});b=O.model,T=O.cache;}b={...b,build:w({mode:C?"incremental":x?"cache":"full",engineStatus:T})};let j;(n.write===true||i("--write"))&&(j=await g(b,l));let A=(n.strict===true||i("--strict"))&&b.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...b,...j?{outputPath:j}:{}},null,2)),A&&process.exit(1);return}console.log(a$2.green(`\u2714 Workspace model: ${b.workspace.name}`)),C?console.log(a$2.gray(` Build: ${T} (incremental)`)):x&&console.log(a$2.gray(` Cache: ${T}`)),console.log(a$2.gray(` Projects: ${b.summary.projectCount}`)),console.log(a$2.gray(` Runtimes: ${b.summary.runtimes.join(", ")||"none"}`)),console.log(a$2.gray(` Frameworks: ${b.summary.frameworks.join(", ")||"none"}`)),console.log(a$2.gray(` Workspace type: ${b.identity.workspaceType}`)),console.log(a$2.gray(` Validation: ${b.validation?.status??"unknown"} (${b.validation?.errors??0} error, ${b.validation?.warnings??0} warning)`)),console.log(j?a$2.gray(` Written: ${j}`):a$2.gray(" Add --write to persist .workspai/reports/workspace-model.json")),A&&process.exit(1);}else if(t==="agent-sync"){let l=s("agent-sync"),{syncWorkspaceAgentGrounding:m,parseAgentGroundingTargets:y}=await import('./workspace-agent-sync-6UYG33EQ.js'),w=n.strict===true||i("--strict"),g=n.write===true||i("--write"),C=i("--dry-run"),x=await m({workspacePath:l,scope:n.scope,agent:n.forAgent,write:g&&!C,dryRun:C,strict:w,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||i("--refresh-context")||i("--refresh"),targets:y(n.target),experimentalHooks:n.experimentalHooks===true||i("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||i("--hydrate-prompts"),projectGrounding:n.projectGrounding??"managed",staleAfterHours:24});if(n.json)console.log(JSON.stringify(x,null,2));else {console.log(a$2.green(`\u2714 Agent grounding ${g&&!C?"synced":"planned"}`)),console.log(a$2.gray(` Index: ${x.indexPath}`)),x.contextPath&&console.log(a$2.gray(` Context: ${x.contextPath}`)),x.blockers.length>0&&console.log(a$2.yellow(` Blockers: ${x.blockers.slice(0,3).join(" \xB7 ")}`));let R=g&&!C?x.writtenFiles:x.skippedFiles;if(R.length>0&&console.log(a$2.gray(` Files: ${R.join(", ")}`)),x.strictViolations.length>0)for(let b of x.strictViolations)console.log(a$2.red(`\u274C ${b}`));}w&&x.strictViolations.length>0&&process.exit(1);}else if(t==="repair"){let l=e??"status",{approveWorkspaceRepair:m,cancelWorkspaceRepair:y,decideWorkspaceRepair:w,executeWorkspaceRepair:g,inspectWorkspaceRepairCapabilities:C,listWorkspaceRepairTransactions:x,planWorkspaceRepair:R,planWorkspaceRepairProposal:b,readWorkspaceRepairTransaction:T,rollbackWorkspaceRepair:j}=await import('./workspace-repair-engine-TDUNQSFJ.js');if(l==="capabilities"){let H;if(n.workspace)H=s("repair capabilities");else try{let oe=b$5({startPath:process.cwd(),strict:false})?.workspacePath;oe&&Ze(oe)&&(H=oe);}catch{}let ie=await C(H?{workspacePath:H,project:n.project}:n.project?{project:n.project}:{});if(n.json===true||i("--json"))console.log(JSON.stringify(ie,null,2));else {console.log(a$2.green(`\u2714 Workspace repair adapters: ${ie.adapters.length}`));for(let oe of ie.adapters)console.log(a$2.gray(` ${oe.id.padEnd(14)} ${oe.support.padEnd(11)} ${oe.ecosystem}`));console.log(a$2.gray(" Missing tools and unsupported ecosystems fail closed."));}return}let A=s("repair"),O=n.transaction??(["plan","propose","capabilities"].includes(l)?void 0:r),J=()=>{if(!O?.trim())throw new Error(`workspace repair ${l} requires --transaction <id> (or the id as the next positional argument).`);return O.trim()},F;if(l==="plan"){let H=n.card??r;if(!H?.trim())throw new Error("workspace repair plan requires --card <id>.");F=await R({workspacePath:A,cardId:H.trim(),actionId:n.actionId,projectName:n.project,maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(l==="propose"){let H=n.proposal??r;if(!H?.trim())throw new Error("workspace repair propose requires --proposal <path>.");let ie=P.resolve(A,H.trim()),oe=P.relative(A,ie);if(oe.startsWith("..")||P.isAbsolute(oe))throw new Error("The repair proposal file must be inside the canonical workspace.");let he=await M__default.lstat(ie).catch(()=>{});if(!he?.isFile()||he.isSymbolicLink()||he.size>25*1024*1024)throw new Error("The repair proposal must be a regular JSON file no larger than 25 MiB.");F=await b({workspacePath:A,proposal:await M__default.readJson(ie),maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(l==="approve")F=await m({workspacePath:A,transactionId:J(),approvedBy:n.approvedBy});else if(l==="decide"){if(!n.decision)throw new Error("workspace repair decide requires --decision <choice>.");F=await w({workspacePath:A,transactionId:J(),decision:n.decision});}else if(l==="execute"||l==="resume")F=await g({workspacePath:A,transactionId:J()});else if(l==="status")F=await T({workspacePath:A,transactionId:J()});else if(l==="list")F=await x(A);else if(l==="rollback")F=await j({workspacePath:A,transactionId:J()});else if(l==="cancel")F=await y({workspacePath:A,transactionId:J()});else throw new Error(`Unknown workspace repair action: ${l}. Available: capabilities, plan, propose, approve, decide, execute, resume, status, list, rollback, cancel.`);let U=P.join(A,p.repairTransaction);if(n.json===true||i("--json"))console.log(JSON.stringify(b$6(`workspace repair ${l}`,F,U),null,2));else if(Array.isArray(F)){console.log(a$2.green(`\u2714 Workspace repair transactions: ${F.length}`));for(let H of F.slice(0,20))console.log(a$2.gray(` ${H.transactionId} \xB7 ${H.target.cardId} \xB7 ${H.state}`));}else {console.log(a$2.green(`\u2714 Workspace repair: ${F.state}`)),console.log(a$2.gray(` Transaction: ${F.transactionId}`)),console.log(a$2.gray(` Target: ${F.target.cardId}`));for(let H of F.stages)console.log(a$2.gray(` ${H.status.padEnd(8)} ${H.kind}: ${H.summary}`));F.decision&&console.log(a$2.yellow(` Decision: ${F.decision.reason}`)),console.log(a$2.gray(` Evidence: ${p.repairTransaction}`));}Array.isArray(F)||(F.state==="decision-required"&&process.exit(2),(F.state==="rolled-back"||F.state==="failed")&&process.exit(1));return}else if(t==="remediation-plan"){let l=s("remediation-plan"),{buildArtifactRemediationPlan:m,writeArtifactRemediationPlan:y}=await import('./artifact-remediation-plan-WDK5ISRU.js'),w=await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),ciMode:n.ci===true||i("--ci")}),g;if((n.write===true||i("--write"))&&(g=await y(w,l)),n.json===true||i("--json")){console.log(JSON.stringify(b$6("workspace remediation-plan",w,g),null,2));return}console.log(a$2.green(`\u2714 Artifact remediation plan: ${w.workspace.name}`)),console.log(a$2.gray(` Artifacts scanned: ${w.summary.artifactsScanned}`)),console.log(a$2.gray(` Cards covered: ${w.summary.cardsCovered}`)),console.log(a$2.gray(` CI mode: ${w.source.ciMode?"yes":"no"}`)),console.log(a$2.gray(` Actions: ${w.summary.totalActions}`)),console.log(a$2.gray(` Risk: safe=${w.summary.risk.safe}, guarded=${w.summary.risk.guarded}, invasive=${w.summary.risk.invasive}`));for(let C of w.actions.slice(0,8))console.log(a$2.gray(` \u2022 ${C.cardId}: ${C.title} (${C.mode}, ${C.risk})`));w.actions.length>8&&console.log(a$2.gray(` \u2026 ${w.actions.length-8} more action(s)`)),console.log(g?a$2.gray(` Written: ${g}`):a$2.gray(" Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let l=s("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(a$2.red("\u274C workspace context currently requires --for-agent")),console.log(a$2.gray(" npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:m,writeWorkspaceAgentContext:y}=await import('./workspace-context-H7ZXR6VI.js'),w=n.strict===true||i("--strict"),g=await m({workspacePath:l,agent:n.forAgent||r||e,scope:n.scope,includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d(),strict:false}),C,x;if((n.write===true||i("--write"))&&(C=await y(g,l),(n.agentSync===true||i("--agent-sync")||n.noAgentSync!==true)&&!i("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:T,parseAgentGroundingTargets:j}=await import('./workspace-agent-sync-6UYG33EQ.js');if(x=await T({workspacePath:l,scope:n.scope,agent:g.agent,write:true,refreshContext:false,strict:w,preset:n.preset==="minimal"?"minimal":"enterprise",targets:j(n.target),projectGrounding:n.projectGrounding??"managed"}),n.json||console.log(a$2.gray(` Agent grounding synced: ${x.writtenFiles.length} file(s) updated`)),w&&x.strictViolations.length>0){for(let A of x.strictViolations)console.log(a$2.red(`\u274C ${A}`));process.exit(1);}}let R=w&&g.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...g,...C?{outputPath:C}:{},...x?{agentGroundingSync:x}:{}},null,2)),R&&process.exit(1);return}if(console.log(a$2.green(`\u2714 Workspace context: ${g.workspace.name}`)),console.log(a$2.gray(` Agent: ${g.agent}`)),console.log(a$2.gray(` Scope: ${g.scope.activeProject??g.scope.requested}`)),console.log(a$2.gray(` Projects included: ${g.projects.length}`)),console.log(a$2.gray(` Safe commands: ${g.safeCommands.length}`)),console.log(a$2.gray(` Validation: ${g.validation.status} (${g.validation.errors} error, ${g.validation.warnings} warning)`)),console.log(C?a$2.gray(` Written: ${C}`):a$2.gray(" Add --write to persist .workspai/reports/workspace-context-agent.json")),R){for(let b of g.validation.issues)console.log(a$2.red(`\u274C ${b.severity}:${b.code}:${b.target}`));process.exit(1);}}else if(t==="snapshot"){let l=s("snapshot"),{buildWorkspaceModelSnapshot:m,writeWorkspaceModelSnapshot:y}=await import('./workspace-intelligence-DXKQXTTM.js'),w=await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),g=await y(w,l);if(n.json){console.log(JSON.stringify(b$6("workspace snapshot",w,g),null,2));return}console.log(a$2.green(`\u2714 Workspace model snapshot: ${w.model.workspace.name}`)),console.log(a$2.gray(` Hash: ${w.modelHash}`)),console.log(a$2.gray(` Projects: ${w.model.summary.projectCount}`)),console.log(a$2.gray(` Workspace type: ${w.model.identity.workspaceType}`)),console.log(a$2.gray(` Written: ${g}`));}else if(t==="diff"){let l=s("diff"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:l},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(a$2.gray(" npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(a$2.gray(" npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(a$2.gray(" npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(a$2.gray(" npx workspai workspace diff --from git --json (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:y,writeWorkspaceModelDiff:w}=await import('./workspace-intelligence-DXKQXTTM.js'),g;try{g=await y({workspacePath:l,fromPath:m,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:R.message,context:{workspacePath:l,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),R}let C=await w(g,l);if(n.json){console.log(JSON.stringify(b$6("workspace diff",g,C),null,2));return}let x=g.summary.changed?a$2.yellow:a$2.green;console.log(x(`\u2714 Workspace model diff: ${g.summary.changed?"changed":"clean"}`)),console.log(a$2.gray(` From: ${g.fromRef}`)),console.log(a$2.gray(` Added projects: ${g.summary.addedProjects}`)),console.log(a$2.gray(` Removed projects: ${g.summary.removedProjects}`)),console.log(a$2.gray(` Changed projects: ${g.summary.changedProjects}`)),console.log(a$2.gray(` Workspace changes: ${g.summary.workspaceChanges}`)),console.log(a$2.gray(` Validation changes: ${g.summary.validationChanges}`)),g.git?.available&&console.log(a$2.gray(` Git: ${g.git.dirty?"dirty":"clean"} (${g.summary.gitChangedFiles} mapped change(s))`));for(let R of g.changes.slice(0,12))console.log(a$2.gray(` \u2022 ${R.type} ${R.target}: ${R.message}`));g.changes.length>12&&console.log(a$2.gray(` \u2026 ${g.changes.length-12} more change(s)`)),console.log(a$2.gray(` Written: ${C}`));}else if(t==="impact"){let l=s("impact"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:l},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(a$2.gray(" npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:y,writeWorkspaceImpact:w}=await import('./workspace-intelligence-DXKQXTTM.js'),g;try{g=await y({workspacePath:l,fromPath:m,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:R.message,context:{workspacePath:l,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),R}let C=await w(g,l);if(n.json){console.log(JSON.stringify(b$6("workspace impact",g,C),null,2));return}let x=g.summary.risk==="critical"||g.summary.risk==="high"?a$2.red:g.summary.risk==="medium"?a$2.yellow:a$2.green;console.log(x(`\u2714 Workspace impact: ${g.summary.risk}`)),console.log(a$2.gray(` From: ${g.fromRef}`)),console.log(a$2.gray(` Affected projects: ${g.summary.affectedProjects}`)),console.log(a$2.gray(` Workspace items: ${g.summary.workspaceItems}`)),console.log(a$2.gray(` Recommended commands: ${g.summary.recommendedCommands}`));for(let R of g.affectedProjects.slice(0,8))console.log(a$2.gray(` \u2022 ${R.title}: ${R.summary}`));g.affectedProjects.length>8&&console.log(a$2.gray(` \u2026 ${g.affectedProjects.length-8} more project(s)`)),console.log(a$2.gray(` Written: ${C}`));}else if(t==="verify"){let l=s("verify"),{buildWorkspaceVerify:m,writeWorkspaceVerify:y,evaluateWorkspaceVerifyGate:w}=await import('./workspace-verify-QTRY7WW3.js'),g=await m({workspacePath:l,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),C=await y(g,l),x=w(g,{strict:n.strict===true||i("--strict")}),R=x.exitCode,{recordWorkspaceHistory:b,historyEntryFromVerify:T}=await import('./workspace-history-WWPS4U7H.js');if(await b(l,T(g,x.passed)),n.json){console.log(JSON.stringify(b$6("workspace verify",{...g,gate:x},C,R),null,2)),R!==0&&process.exit(R);return}let j=g.summary.verdict==="ready"?a$2.green:g.summary.verdict==="needs-attention"?a$2.yellow:a$2.red;console.log(j(`\u2714 Workspace verify: ${g.summary.verdict}`)),console.log(a$2.gray(` Freshness: ${g.freshness.verdict}`)),console.log(a$2.gray(` Impact risk: ${g.impact.risk}`)),console.log(a$2.gray(` Steps: ${g.steps.length}`)),console.log(a$2.gray(` Passed ${g.summary.stepsPassed}, warn ${g.summary.stepsWarn}, failed ${g.summary.stepsFailed}, missing ${g.summary.stepsMissing}`));for(let A of g.steps.slice(0,10))console.log(a$2.gray(` \u2022 ${A.id}: ${A.status} \u2014 ${A.message}`));if(g.steps.length>10&&console.log(a$2.gray(` \u2026 ${g.steps.length-10} more step(s)`)),g.policyViolations.length>0){console.log(a$2.gray(` Policy (${g.policyMode}): ${g.policyViolations.length} violation(s)`));for(let A of g.policyViolations.slice(0,5)){let O=A.severity==="error"?a$2.red("\u2717"):a$2.yellow("!");console.log(` ${O} [${A.source}] ${A.code}: ${A.message}`);}}console.log(a$2.gray(` Gate (${x.mode}): ${x.passed?"passed":"blocked"}`));for(let A of x.reasons.slice(0,5))console.log(a$2.red(` \u2717 ${A}`));console.log(a$2.gray(` Written: ${C}`)),R!==0&&process.exit(R);}else if(t==="graph"){let l=s("graph"),{buildWorkspaceModel:m,workspaceModelProjectTopology:y}=await import('./workspace-model-XSNLDUI2.js'),{buildGraphEmit:w,renderGraphDot:g,renderGraphMermaid:C,explainGraphNode:x}=await import('./workspace-graph-2A5THUCI.js'),R=(e||"emit").toLowerCase(),b=["emit","dot","mermaid","jsonld","graphml","gexf","explain","entities","search","benchmark","benchmark-suite","evidence","path","overlay"];if(!b.includes(R)){let D=`Unknown workspace graph mode '${R}'.`;n.json?console.log(JSON.stringify(c$1({operation:`workspace graph ${R}`,code:"workspace.graph.mode.unsupported",message:D,exitCode:2,context:{mode:R,supportedModes:b},examples:["workspai workspace graph emit --json"]}),null,2)):(console.log(a$2.red(`\u274C ${D}`)),console.log(a$2.gray(` Supported: ${b.join(", ")}`))),process.exit(2);}let T=new Set(["benchmark","benchmark-suite","entities","evidence","path","search"]),j=n.refreshGraph===true||i("--refresh-graph"),A=T.has(R)&&!j?await(await import('./workspace-knowledge-graph-snapshot-2NMV7LEJ.js')).readWorkspaceKnowledgeGraphSnapshot(l):null,O=A?.status==="hit"?A.graph:null,J=A?.status==="hit"?A.model:await m({workspacePath:l,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:d()}),F=y(J);F||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:R,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(a$2.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let U=async()=>{if(O)return O;let{buildWorkspaceKnowledgeGraph:D}=await import('./workspace-knowledge-graph-BNEVFEOW.js'),{hashWorkspaceModel:G}=await import('./workspace-model-hash-ZXYPIGCW.js'),{readWorkspaceContract:ne}=await import('./workspace-contract-2V2BI6A3.js'),te=null;try{te=(await ne({workspacePath:l})).contract;}catch{}return D({...u(),workspacePath:l,workspace:{name:J.workspace.name,...J.workspace.profile?{profile:J.workspace.profile}:{}},projects:J.projects.map(z=>({id:z.name,path:z.path,...z.absolutePath?{absolutePath:z.absolutePath}:{},runtime:z.runtime,runtimeCandidates:z.runtimeCandidates,framework:z.framework,kind:z.kind,category:z.category,...z.governance?{governance:z.governance}:{},...z.kit?{kit:z.kit}:{}})),projectTopology:F,contract:te,now:new Date(J.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:G(J)}})};if(R==="dot"||R==="mermaid"){let D=R==="dot"?g(F):C(F),G=p$1();if(G){let ne=P.resolve(l,G);await M__default.outputFile(ne,`${D}
394
394
  `,"utf8"),n.json?console.log(JSON.stringify(b$6(`workspace graph ${R}`,{format:R,nodeCount:F.stats.nodeCount,edgeCount:F.stats.edgeCount},ne),null,2)):(console.log(a$2.green(`\u2714 Workspace dependency graph exported as ${R}`)),console.log(a$2.gray(` Written: ${ne}`)));return}console.log(D);return}if(R==="jsonld"||R==="graphml"||R==="gexf"){let D=await U(),{renderWorkspaceKnowledgeGraphGexf:G,renderWorkspaceKnowledgeGraphGraphMl:ne,renderWorkspaceKnowledgeGraphJsonLd:te}=await import('./workspace-knowledge-graph-export-UYAYFTWX.js'),z=R==="jsonld"?te(D):R==="graphml"?ne(D):G(D),ee=p$1();if(ee){let Y=P.resolve(l,ee);await M__default.outputFile(Y,`${z}
395
- `,"utf8"),n.json?console.log(JSON.stringify(b$6(`workspace graph ${R}`,{format:R,entityCount:D.entities.length,relationCount:D.relations.length,proofCount:D.proofs.length},Y),null,2)):(console.log(a$2.green(`\u2714 Workspace knowledge graph exported as ${R}`)),console.log(a$2.gray(` Written: ${Y}`)));return}console.log(z);return}if(R==="explain"){let D=(n.scope?.replace(/^project:/,"")||r||"").trim();D||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace graph explain requires a project.")),console.log(a$2.gray(" npx workspai workspace graph explain <project> --json")),console.log(a$2.gray(" npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let G=x(F,D);if(n.json){console.log(JSON.stringify(G,null,2)),G.found||process.exit(1);return}G.found||(console.log(a$2.red(`\u274C Project not found in dependency graph: ${D}`)),process.exit(1)),console.log(a$2.green(`\u2714 Graph explain: ${G.project}`)),G.centrality&&console.log(a$2.gray(` Centrality: fanIn ${G.centrality.fanIn}, fanOut ${G.centrality.fanOut}, reach ${G.centrality.reach}, betweenness ${G.centrality.betweenness}${G.centrality.isHotspot?" (hotspot)":""}`)),console.log(a$2.gray(` Direct dependents: ${G.directDependents.join(", ")||"none"}`)),console.log(a$2.gray(` Direct dependencies: ${G.directDependencies.join(", ")||"none"}`)),console.log(a$2.gray(` Blast radius (transitive dependents): ${G.transitiveDependents.length}`));for(let ne of G.transitiveDependents.slice(0,10))console.log(a$2.gray(` \u2022 ${ne.id} (d${ne.distance}, via ${ne.via??"\u2014"})`));return}if(R==="entities"){let D=await U(),{queryKnowledgeEntities:G}=await import('./workspace-knowledge-graph-query-3GPXGWYN.js'),ne=(r||n.kind||"").trim()||void 0;if(ne){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:V}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');V.includes(ne)||(console.log(a$2.red(`\u274C Unknown graph entity kind: ${ne}`)),console.log(a$2.gray(` Supported: ${V.join(", ")}`)),process.exit(1));}let te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=G(D,ne,te),ee=n.limit??c("--limit"),Y=ee===void 0?void 0:Number.parseInt(ee,10);Y!==void 0&&(!Number.isFinite(Y)||Y<1||Y>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let _=Y===void 0?z:z.slice(0,Y);if(n.json){console.log(JSON.stringify({schemaVersion:D.schemaVersion,generatedAt:D.generatedAt,kind:ne??null,...te?{projectId:te}:{},count:_.length,totalMatches:z.length,truncated:_.length<z.length,entities:_},null,2));return}console.log(a$2.green(`\u2714 Workspace graph entities${ne?`: ${ne}`:""}`)),console.log(a$2.gray(` Count: ${_.length}/${z.length}${_.length<z.length?" (bounded)":""}`));for(let V of _)console.log(a$2.gray(` \u2022 ${V.kind}: ${V.label} [${V.id}]`));return}if(R==="benchmark-suite"){let D=(r||"agent-core.v1").trim(),{WORKSPACE_INTELLIGENCE_BENCHMARK_REPORT_PATH:G,WORKSPACE_INTELLIGENCE_BENCHMARK_SUITES:ne,buildWorkspaceIntelligenceBenchmark:te,writeWorkspaceIntelligenceBenchmark:z}=await import('./workspace-intelligence-benchmark-UCGDKMDF.js');D in ne||(console.log(a$2.red(`\u274C Unknown benchmark suite: ${D}`)),console.log(a$2.gray(` Supported: ${Object.keys(ne).join(", ")}`)),process.exit(2));let ee=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(ee)||ee<1||ee>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let Y=await U(),_=await te({workspacePath:l,graph:Y,suite:D,limit:ee,...n.from?{baselineEvaluationPath:n.from}:{}}),K=n.write===true||i("--write")||!!p$1()?await z(l,_,p$1()??G):void 0;if(n.json){console.log(JSON.stringify(b$6("workspace graph benchmark-suite",_,K),null,2));return}console.log(a$2.green(`\u2714 Workspace Intelligence benchmark: ${_.suite.title}`)),console.log(a$2.gray(` Scenarios: ${_.retrievalSummary.matchedScenarioCount}/${_.retrievalSummary.scenarioCount} matched \xB7 ${_.retrievalSummary.status}`)),console.log(a$2.gray(` Median estimated retrieval: ${_.retrievalSummary.medianRetrievalEstimatedTokens} tokens \xB7 p95 ${_.retrievalSummary.p95RetrievalEstimatedTokens}`)),console.log(a$2.gray(` Median estimated payload reduction: ${_.retrievalSummary.medianEstimatedReductionPercent}%`)),console.log(a$2.gray(` Model evaluation: ${_.evaluation.availability} (${_.evaluation.provenance})`)),console.log(a$2.yellow(` ${_.methodology.claimBoundary}`)),K&&console.log(a$2.gray(` Written: ${K}`));return}if(R==="search"||R==="benchmark"){let D=(r||"").trim();D||(console.log(a$2.red(`\u274C workspace graph ${R} requires a search query.`)),console.log(a$2.gray(` npx workspai workspace graph ${R} "authentication endpoint" --json`)),process.exit(1));let G=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(G)||G<1||G>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let ne=await U();if(R==="benchmark"){let _=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,{buildWorkspaceGraphTokenEfficiencyReport:V}=await import('./workspace-graph-token-efficiency-BTIS6JXL.js'),K=await V({workspacePath:l,graph:ne,query:D,limit:G,..._?{projectId:_}:{}});n.json?console.log(JSON.stringify(K,null,2)):(console.log(a$2.green(`\u2714 Graph retrieval benchmark: ${D}`)),console.log(a$2.gray(` Estimated tokens: ${K.corpus.estimatedTokens} corpus \u2192 ${K.retrieval.estimatedTokens} bounded retrieval`)),console.log(a$2.gray(` Estimated payload reduction: ${K.savings.reductionRatio}\xD7 (${K.savings.reductionPercent}%)`)),console.log(a$2.gray(` Matches: ${K.retrieval.matchCount}`)),console.log(a$2.yellow(` ${K.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:te}=await import('./workspace-knowledge-graph-query-3GPXGWYN.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=n.kind?String(n.kind).trim():void 0;if(ee){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:_}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');_.includes(ee)||(console.log(a$2.red(`\u274C Unknown graph entity kind: ${ee}`)),console.log(a$2.gray(` Supported: ${_.join(", ")}`)),process.exit(1));}let Y=te(ne,{query:D,limit:G,...ee?{kind:ee}:{},...z?{projectId:z}:{},projection:"agent"});if(n.json)console.log(JSON.stringify(Y,null,2));else {console.log(a$2.green(`\u2714 Workspace graph search: ${D}`)),console.log(a$2.gray(` ${Y.entities.length}/${Y.totalMatches} match(es)${Y.truncated?" (bounded)":""}`));for(let _ of Y.entities)console.log(a$2.gray(` \u2022 ${_.kind}: ${_.label} [${_.id}]`));}return}if(R==="evidence"){let D=(r||"").trim();D||(console.log(a$2.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let G=await U(),{queryKnowledgeEvidence:ne}=await import('./workspace-knowledge-graph-query-3GPXGWYN.js'),te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=ne(G,D,te);if(n.json)console.log(JSON.stringify(z,null,2));else if(z.found){console.log(a$2.green(`\u2714 Graph evidence: ${D}`));for(let ee of z.proofs)console.log(a$2.gray(` \u2022 ${ee.artifact}${ee.pointer?`#${ee.pointer}`:""} [${ee.provider}/${ee.trust}/${ee.confidence}]`));}else {console.log(a$2.red(z.candidates.length>0?`\u274C Graph query is ambiguous: ${D}`:`\u274C Graph entity or relation not found: ${D}`));for(let ee of z.candidates.slice(0,10))console.log(a$2.gray(` \u2022 ${ee}`));}z.found||process.exit(1);return}if(R==="path"){let D=(r||"").trim(),G=(o||"").trim();(!D||!G)&&(console.log(a$2.red("\u274C workspace graph path requires <from> and <to>.")),console.log(a$2.gray(" npx workspai workspace graph path <from> <to> --json")),process.exit(1));let ne=await U(),{queryKnowledgePath:te}=await import('./workspace-knowledge-graph-query-3GPXGWYN.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=te(ne,D,G,z);if(n.json)console.log(JSON.stringify(ee,null,2));else if(ee.found){console.log(a$2.green(`\u2714 Graph proof path: ${D} \u2192 ${G}`));for(let Y of ee.hops)console.log(a$2.gray(` \u2022 ${Y.from} ${Y.direction==="forward"?"\u2192":"\u2190"} ${Y.to} [${Y.kind}]`));console.log(a$2.gray(` Proofs: ${ee.proofs.length}`));}else console.log(a$2.red(`\u274C No graph path found between ${D} and ${G}.`));ee.found||process.exit(1);return}if(R==="overlay"){let D=(n.from||r||"").trim();D||(console.log(a$2.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(a$2.gray(" npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let G=P.resolve(l,D),ne;try{ne=JSON.parse(await M__default.readFile(G,"utf8"));}catch(Ie){console.log(a$2.red(`\u274C Could not read the base knowledge graph: ${Ie instanceof Error?Ie.message:String(Ie)}`)),process.exit(1);}let te=ne&&typeof ne=="object"?ne:{},z=te.graph,ee=z&&typeof z=="object"?z:{},Y=te.schemaVersion===q.knowledgeGraph?te:te.knowledgeGraph??ee.knowledgeGraph;(!Y||typeof Y!="object"||Y.schemaVersion!==q.knowledgeGraph)&&(console.log(a$2.red(`\u274C Base file does not contain a ${q.knowledgeGraph} document.`)),process.exit(1));let _=await U(),{buildWorkspaceKnowledgeGraphChangeOverlay:V}=await import('./workspace-knowledge-graph-change-overlay-FIIAFLO6.js'),K=V(Y,_);if(n.json){console.log(JSON.stringify(K,null,2));return}console.log(a$2.green("\u2714 Workspace graph change overlay")),console.log(a$2.gray(` Base: ${D}`)),console.log(a$2.gray(` Risk: ${K.summary.risk}`)),console.log(a$2.gray(` Entities: +${K.summary.entityAdds} -${K.summary.entityRemovals} ~${K.summary.entityChanges}`)),console.log(a$2.gray(` Relations: +${K.summary.relationAdds} -${K.summary.relationRemovals} ~${K.summary.relationChanges}`)),console.log(a$2.gray(` Proofs: +${K.summary.proofAdds} -${K.summary.proofRemovals} ~${K.summary.proofChanges}`)),console.log(a$2.gray(` Impacted: ${K.summary.impactedEntities} entities \xB7 ${K.summary.changedArtifacts} proof artifacts`));return}let H=w(F),{writeWorkspaceModel:ie}=await import('./workspace-model-5FA2636K.js');await ie(J,l,{refreshKnowledgeGraph:j});let oe=await M__default.readJson(P.join(l,p.knowledgeGraph)),he={...H,knowledgeGraph:oe},Ke=p$1();if(Ke){let D=P.resolve(l,Ke);await M__default.outputFile(D,`${JSON.stringify(he,null,2)}
396
- `,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace graph emit",{format:"json",nodeCount:F.stats.nodeCount,edgeCount:F.stats.edgeCount,entityCount:oe.entities.length,relationCount:oe.relations.length,proofCount:oe.proofs.length},D),null,2)):(console.log(a$2.green("\u2714 Workspace graph artifact exported as JSON")),console.log(a$2.gray(` Written: ${D}`)));return}if(n.json){console.log(JSON.stringify(he,null,2));return}console.log(a$2.green("\u2714 Workspace dependency graph")),console.log(a$2.gray(` Nodes: ${H.graph.stats.nodeCount}`)),console.log(a$2.gray(` Edges: ${H.graph.stats.edgeCount} (inferred ${H.graph.stats.inferredEdges}, contract ${H.graph.stats.contractEdges}, manual ${H.graph.stats.manualEdges})`)),console.log(a$2.gray(` Integrity: ${H.integrity.ok?"ok":"issues"} (cycles ${H.integrity.stats.cycleCount}, dangling ${H.integrity.stats.danglingCount}, orphans ${H.integrity.stats.orphanCount})`)),console.log(a$2.gray(` Hotspots: ${H.hotspots.join(", ")||"none"}`)),console.log(a$2.gray(` Knowledge: ${oe.quality.entityCount} entities \xB7 ${oe.quality.relationCount} relations \xB7 ${oe.quality.proofCount} proofs \xB7 ${oe.providers.length} providers`));let He=(oe.source.inputs?.scopes??[]).filter(D=>D.truncated),ve=oe.quality.completeness;if(He.length>0?console.log(a$2.yellow(` Inventory: emergency-bounded \u2014 ${He.map(D=>`${D.kind}:${D.id} indexed ${D.fileCount}/${D.eligibleFileCountExact===false?"at-least-":""}${D.eligibleFileCount??D.fileCount} eligible files`).join(", ")}`)):console.log(a$2.gray(` Inventory: complete \u2014 ${ve?.inventory.indexedFiles??(oe.source.inputs?.scopes??[]).reduce((D,G)=>D+G.fileCount,0)} eligible files indexed across ${ve?.inventory.scopeCount??(oe.source.inputs?.scopes??[]).length} scope(s)`)),ve){let D=`${ve.providers.complete} complete \xB7 ${ve.providers.bounded} adaptive-bounded \xB7 ${ve.providers.notApplicable} not-applicable \xB7 ${ve.providers.failed} failed`;console.log(ve.status==="complete"?a$2.gray(` Provider coverage: ${D}`):a$2.yellow(` Provider coverage: ${D}`));}console.log(a$2.gray(" Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(a$2.gray(" Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let l=s("watch"),{runWorkspaceWatch:m}=await import('./workspace-watch-P5X6TAFK.js'),y=n.once===true||i("--once"),w=n.graphStream===true||i("--graph-stream"),g=n.json===true||w,C=w?new(await import('./workspace-graph-stream-SJUCBPS4.js')).WorkspaceGraphStreamPublisher({workspacePath:l}):null,x=new AbortController,R=()=>x.abort();process.once("SIGINT",R),process.once("SIGTERM",R),g||console.log(a$2.green("\u2714 Workspace watch (model + graph kept in memory)")),await m({workspacePath:l,once:y,signal:x.signal,buildOptions:{workspacePath:l,observableScanDepth:d()},onProgress:b=>{g||console.error(a$2.gray(` ${b}`));},onModel:C?async b=>{let T=(await import('./workspace-model-5FA2636K.js')).workspaceModelProjectTopology(b);if(!T)return;let{buildWorkspaceKnowledgeGraph:j}=await import('./workspace-knowledge-graph-WNQMNAVL.js'),{readWorkspaceContract:A}=await import('./workspace-contract-E7GVWM7W.js'),O=null;try{O=(await A({workspacePath:l})).contract;}catch{}let J=await j({...u(),workspacePath:l,workspace:{name:b.workspace.name,...b.workspace.profile?{profile:b.workspace.profile}:{}},projects:b.projects.map(F=>({id:F.name,path:F.path,...F.absolutePath?{absolutePath:F.absolutePath}:{},runtime:F.runtime,runtimeCandidates:F.runtimeCandidates,framework:F.framework,...F.kit?{kit:F.kit}:{}})),projectTopology:T,contract:O,now:new Date(b.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-ZXYPIGCW.js')).hashWorkspaceModel(b)}});console.log(JSON.stringify(C.publish(b,J)));}:void 0,emit:b=>{if(w)return;if(g){console.log(JSON.stringify(b));return}if(b.kind==="ready"){console.log(a$2.gray(` Ready: ${b.graph.nodeCount} nodes, ${b.graph.edgeCount} edges (hash ${b.modelHash.slice(0,12)})`));return}if(b.kind==="error"){console.error(a$2.red(` \u2717 Rebuild failed: ${b.error??"unknown error"}`));return}if(b.kind==="unchanged"){console.log(a$2.gray(` No structural change (${b.mode}, ${b.durationMs}ms)`));return}let T=[];b.changedProjects.length>0&&T.push(`changed: ${b.changedProjects.join(", ")}`),b.addedProjects.length>0&&T.push(`added: ${b.addedProjects.join(", ")}`),b.removedProjects.length>0&&T.push(`removed: ${b.removedProjects.join(", ")}`),b.graph.edgesAdded.length>0&&T.push(`+${b.graph.edgesAdded.length} edges`),b.graph.edgesRemoved.length>0&&T.push(`-${b.graph.edgesRemoved.length} edges`),console.log(a$2.cyan(` \u21BB Changed (${b.mode}, ${b.durationMs}ms): ${T.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",R),process.removeListener("SIGTERM",R),!g&&!y&&console.log(a$2.gray(" Watch stopped."));return}else if(t==="sync"){let l=s("sync"),{syncWorkspaceProjects:m}=await import('./workspace-E3MM3AIE.js');n.json||console.log(a$2.cyan(`\u{1F4C2} Scanning workspace: ${P.basename(l)}`));let y=await m(l,n.json===true);await Yr(l,{silent:n.json===true});let{syncWorkspaceProjectLenses:w}=await import('./project-intelligence-lens-QTQEZXUY.js'),g=await w({workspacePath:l,mode:n.projectGrounding??"managed"}),{readWorkspaceRegistrySummary:C}=await import('./workspace-registry-summary-WKENOFEA.js'),x=await C(l);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:l,registry:y,contractSynced:true,projectLenses:{synced:g.projects.length,skipped:g.skipped},registrySummary:x},null,2));}else if(t==="registry"){let l=s("registry"),m=e||"status";m!=="status"&&(console.log(a$2.red(`\u274C Unknown workspace registry action: ${m}`)),console.log(a$2.gray(" npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:y,resolveWorkspaceRegisteredProjects:w}=await import('./workspace-registry-summary-WKENOFEA.js'),g=await y(l);if(n.json){console.log(JSON.stringify(g,null,2));return}let C=await w(l);console.log(a$2.cyan("Workspace registry")),console.log(a$2.gray(` Authority: ${g.authority}`)),console.log(a$2.gray(` Projects: ${g.projectCount}`)),console.log(a$2.gray(` Summary: ${g.registrySummaryPath}`)),C.summary.projectCount===0&&console.log(a$2.yellow(" No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let l=s("foundation"),m=e||"ensure";m!=="ensure"&&(console.log(a$2.red(`\u274C Unknown workspace foundation action: ${m}`)),console.log(a$2.gray(" npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:y}=await import('./workspace-foundation-LRLYPR36.js'),w=await y(l,{force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(w,null,2));return}w.created.length>0?console.log(a$2.green(`\u2714 Workspace foundation ensured: ${w.created.join(", ")}`)):console.log(a$2.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let l=s("policy"),m=await Cg(l,e,r,o,n.json===true||i("--json"));m!==0&&process.exit(m);}else if(t==="contract"){let l=s("contract"),{buildWorkspaceContractGraph:m,readWorkspaceContract:y,syncWorkspaceContract:w,verifyWorkspaceContract:g,writeWorkspaceContract:C,WORKSPACE_CONTRACT_PATH:x}=await import('./workspace-contract-E7GVWM7W.js'),R=e||"inspect",b=p$1(),T=R==="graph"||R==="sync"?void 0:b;try{if(R==="init"){let j=await C({workspacePath:l,outputPath:T,force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract initialized: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`));return}if(R==="inspect"){let j=await y({workspacePath:l,contractPath:T});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract: ${j.contractPath}`)),console.log(a$2.gray(` Workspace: ${j.contract.workspace.name}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`)),console.log(a$2.gray(` Schema: v${j.contract.schemaVersion}`));return}if(R==="sync"){let j=await w({workspacePath:l,strict:n.strict===true||i("--strict")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract synchronized: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`)),console.log(a$2.gray(` Added: ${j.addedProjects.join(", ")||"none"}`)),console.log(a$2.gray(` Updated: ${j.updatedProjects.join(", ")||"none"}`));return}if(R==="verify"){let j=await g({workspacePath:l,contractPath:T,strict:n.strict===true||i("--strict")}),{writeWorkspaceContractVerifyEvidence:A}=await import('./workspace-contract-E7GVWM7W.js'),O=await A({workspacePath:l,result:j});if(n.json)console.log(JSON.stringify({...j,evidencePath:O},null,2));else {let J=j.status==="passed"?a$2.green:a$2.red;console.log(J(`\u2714 Workspace contract verification ${j.status}: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.projectCount}`));for(let F of j.checks){let U=F.status==="passed"?"\u2714":"\u2718";console.log(a$2.gray(` ${U} ${F.id}: ${F.message}`));}for(let F of j.violations)console.log(a$2.gray(` Violation: ${F}`));}(j.status==="failed"||j.status!=="passed"&&n.strict)&&process.exit(1);return}if(R==="graph"){let j=await m({workspacePath:l,contractPath:T});if(b){let A=P.resolve(l,b);await M__default.outputFile(A,`${JSON.stringify(j,null,2)}
397
- `,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace contract graph",{projectCount:j.graph.summary.projectCount,relationshipEdges:j.graph.summary.relationshipEdges,entityCount:j.graph.summary.entityCount,knowledgeRelations:j.graph.summary.knowledgeRelations,proofCount:j.graph.summary.proofCount},A),null,2)):(console.log(a$2.green("\u2714 Workspace contract graph exported as JSON")),console.log(a$2.gray(` Written: ${A}`)));return}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract graph: ${j.contractPath}`)),console.log(a$2.gray(` Workspace: ${j.graph.workspace.name}`)),console.log(a$2.gray(` Projects: ${j.graph.summary.projectCount}`)),console.log(a$2.gray(` Dependencies: ${j.graph.summary.dependencyEdges}`)),console.log(a$2.gray(` Event links: ${j.graph.summary.eventEdges}`)),console.log(a$2.gray(` Evidence-backed relationships: ${j.graph.summary.relationshipEdges} (${j.graph.summary.inferredEdges} inferred, ${j.graph.summary.authoritativeEdges} authoritative)`)),console.log(a$2.gray(` Connected projects: ${j.graph.summary.connectedProjects}/${j.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(j.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(j.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(a$2.gray(` Orphans: ${j.graph.summary.orphanProjects} \xB7 Hotspots: ${j.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${j.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${j.graph.summary.hasCycle?"yes":"no"}`)),console.log(a$2.gray(` Knowledge: ${j.graph.summary.entityCount} entities \xB7 ${j.graph.summary.knowledgeRelations} relations \xB7 ${j.graph.summary.proofCount} proofs \xB7 ${j.graph.summary.providerCount} providers \xB7 ${j.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(a$2.gray(` Ports: ${j.graph.summary.portCount}`));for(let A of j.graph.nodes){let O=A.ports.map(F=>`${F.name}:${F.port}`).join(", ")||"none",J=A.operationalProfile?` risk=${A.operationalProfile.weight}/${A.operationalProfile.verificationPriority}`:"";console.log(a$2.gray(` \u2022 ${A.id} (${A.runtime||"unknown"}${A.framework?`/${A.framework}`:""}) ports=${O} manifests=${A.files.manifests.length}${J}`));}for(let A of j.graph.edges){let O=A.type==="event"?`event:${A.label}`:A.label;console.log(a$2.gray(` ${A.from} -> ${A.to} [${O}]`));}if(j.graph.dependencyGraph.edges.length>0){console.log(a$2.gray(" Evidence-backed dependency direction (consumer -> dependency):"));for(let A of j.graph.dependencyGraph.edges)console.log(a$2.gray(` ${A.from} -> ${A.to} [${A.kind}/${A.source}/${A.confidence}] evidence=${A.evidence.length}`));}for(let A of j.graph.dependencyGraph.diagnostics||[])console.log(a$2.gray(` ${A.severity}: ${A.message}`));return}console.log(a$2.red(`\u274C Unknown workspace contract action: ${R}`)),console.log(a$2.white(` npx workspai workspace contract init|inspect|sync|verify|graph [--output ${x}]`)),process.exit(1);}catch(j){n.json&&(console.log(JSON.stringify({command:`workspace contract ${R}`,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${R}.failed`,message:j.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace contract ${R} failed: ${j.message}`)),process.exit(1);}}else if(t==="share"){let l=s("share"),m=p$1()||e,{createWorkspaceShareBundle:y}=await import('./workspace-E3MM3AIE.js'),w=await y(l,{outputPath:m,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:l,bundlePath:w,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(a$2.green(`\u2714 Workspace share bundle exported: ${w}`)),console.log(a$2.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let l=s("export");try{let{exportWorkspaceArchive:m}=await import('./workspace-archive-OSMU3CK6.js'),y=n.archiveCompression?.trim().toLowerCase()??"store";if(y!=="store"&&y!=="deflate")throw new Error("--archive-compression must be store or deflate.");let w=await m({workspacePath:l,outputPath:p$1()||e,includeEnv:n.includeEnv===true||i("--include-env"),compression:y});if(n.json){console.log(JSON.stringify(w,null,2));return}let g=(w.bytesWritten/(1024*1024)).toFixed(2);console.log(a$2.green(`\u2714 Workspace archive exported: ${w.archivePath}`)),console.log(a$2.gray(` Files: ${w.manifest.files.length}`)),console.log(a$2.gray(` Size: ${g} MB`)),w.manifest.security.envFilesIncluded||console.log(a$2.gray(" Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(m){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:m.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace archive export failed: ${m.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let l=r;l||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(a$2.white(` npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:m,inspectWorkspaceArchive:y,verifyWorkspaceArchive:w}=await import('./workspace-archive-OSMU3CK6.js');try{if(e==="inspect"){let C=await y({archivePathOrUrl:l,safety:v()});if(n.json){console.log(JSON.stringify(C,null,2));return}let x=(C.totalBytes/(1024*1024)).toFixed(2);console.log(a$2.green(`\u2714 Workspace archive: ${C.archivePath}`)),console.log(a$2.gray(` Workspace: ${C.manifest.workspaceName}`)),console.log(a$2.gray(` Exported: ${C.manifest.exportedAt}`)),console.log(a$2.gray(` Exporter: ${C.manifest.exportedBy||"unknown"}`)),console.log(a$2.gray(` Files: ${C.fileCount}`)),console.log(a$2.gray(` Payload: ${x} MB`));return}if(e==="doctor"){let C=await m({archivePathOrUrl:l,strict:n.strict===true||i("--strict"),safety:v()});if(n.json)console.log(JSON.stringify(C,null,2));else {let x=C.status==="passed"?a$2.green:C.status==="warning"?a$2.yellow:a$2.red;console.log(x(`\u2714 Workspace archive doctor ${C.status}: ${C.archivePath}`)),console.log(a$2.gray(` Workspace: ${C.workspaceName}`)),console.log(a$2.gray(` Files: ${C.fileCount}`));for(let R of C.checks){let b=R.status==="passed"?"\u2714":R.status==="warning"?"\u26A0":"\u2718";console.log(a$2.gray(` ${b} ${R.id}: ${R.message}`));}for(let R of C.recommendedActions)console.log(a$2.gray(` Next: ${R}`));}(C.status==="failed"||C.status==="warning"&&n.strict)&&process.exit(1);return}let g=await w({archivePathOrUrl:l,requireChecksums:n.strict===true||i("--strict"),safety:v()});if(n.json)console.log(JSON.stringify(g,null,2));else if(g.status==="passed")console.log(a$2.green(`\u2714 Workspace archive verified: ${g.archivePath}`)),console.log(a$2.gray(` Files: ${g.verifiedFiles}/${g.fileCount}`));else {let C=g.status==="failed"?a$2.red:a$2.yellow;console.log(C(`\u274C Workspace archive verification ${g.status}: ${g.archivePath}`)),g.missingArchiveEntries.length&&console.log(a$2.gray(` Missing entries: ${g.missingArchiveEntries.join(", ")}`)),g.extraArchiveEntries.length&&console.log(a$2.gray(` Unexpected entries: ${g.extraArchiveEntries.join(", ")}`)),g.mismatches.length&&console.log(a$2.gray(` Mismatches: ${g.mismatches.map(x=>x.path).join(", ")}`)),g.missingChecksumFiles.length&&console.log(a$2.gray(` Missing checksums: ${g.missingChecksumFiles.join(", ")}`));}(g.status==="failed"||g.status==="warning"&&n.strict)&&process.exit(1);}catch(g){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:l,error:{code:`workspace.archive.${e}.failed`,message:g.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace archive ${e} failed: ${g.message}`)),process.exit(1);}}else if(t==="connect"){let l=P.resolve(e||process.cwd());try{let m=await Rs({workspacePath:l,dryRun:n.dryRun===true||i("--dry-run"),projectGrounding:n.projectGrounding});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(a$2.green(m.status==="preview"?`\u2714 Workspace connection preview: ${l}`:`\u2714 Workspace connected: ${l}`));for(let y of m.warnings)console.log(a$2.yellow(` \u26A0 ${y}`));}catch(m){let y=m instanceof Error?m.message:String(m);n.json?console.log(JSON.stringify(c$1({operation:"workspace connect",code:"workspace.connect.failed",message:y}),null,2)):console.log(a$2.red(`\u274C Workspace connect failed: ${y}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let l=e;l||(n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.input-required",message:"workspace import requires an archive path or URL."}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.hydrate.input-required",message:"workspace hydrate requires an archive path or URL."}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(a$2.white(` npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));try{if(t==="import"){let m=await As({archivePathOrUrl:l,outputPath:p$1(),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),projectGrounding:n.projectGrounding,safety:v()});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(a$2.green(m.status==="preview"?`\u2714 Workspace import preview: ${m.workspacePath}`:`\u2714 Workspace imported and registered: ${m.workspacePath}`));for(let y of m.warnings)console.log(a$2.yellow(` \u26A0 ${y}`));}else {let{hydrateWorkspaceArchive:m}=await import('./workspace-archive-OSMU3CK6.js'),y=await m({archivePathOrUrl:l,outputPath:p$1(),force:n.force===true||i("--force"),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),safety:v()});if(n.json){console.log(JSON.stringify(y,null,2));return}console.log(a$2.green(y.dryRun?`\u2714 Workspace archive hydrate preview: ${y.outputPath}`:`\u2714 Workspace archive hydrated: ${y.outputPath}`)),console.log(a$2.gray(` Files: ${y.files.length}`)),y.manifest?.workspaceName&&console.log(a$2.gray(` Workspace: ${y.manifest.workspaceName}`));}}catch(m){let y=m instanceof Error?m.message:String(m);n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.failed",message:y,context:{archivePathOrUrl:l,...p$1()?{outputPath:p$1()}:{}}}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:l,...p$1()?{outputPath:p$1()}:{},dryRun:n.dryRun===true||i("--dry-run"),error:{code:`workspace.${t}.failed`,message:y}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace ${t} failed: ${y}`)),process.exit(1);}}else if(t==="run"){let l=s(`run ${e||""}`.trim()),m=new Set(["init","test","build","start"]),y=e?.trim()??"";y||(console.log(a$2.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(a$2.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(a$2.gray(" \u2022 init \u2014 run install/bootstrap across the project fleet")),console.log(a$2.gray(" \u2022 test \u2014 run test suite across selected projects")),console.log(a$2.gray(" \u2022 build \u2014 compile/package across selected projects")),console.log(a$2.gray(" \u2022 start \u2014 start services (smoke/e2e scenarios)")),console.log(a$2.gray(" \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(a$2.gray(" Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),m.has(y)||(!/^[a-z][a-z0-9_-]*$/i.test(y)||y==="dev"||y==="stop")&&(console.log(a$2.red(`Unknown workspace run stage: ${y}`)),console.log(a$2.gray("Available stages: init | test | build | start | <custom-from-context>")),y==="dev"&&console.log(a$2.gray(" Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2));let w=Ds({raw:n.maxWorkers,operation:`workspace run ${y}`,json:n.json===true||i("--json")});if(y==="init"&&n.json!==true){let x=await Bs(l);x!==0&&process.exit(x);}let{runWorkspaceStage:g}=await import('./workspace-run-HFOY2UYT.js'),C=await g({workspacePath:l,stage:y,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:w,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true,planOnly:n.plan===true,runtime:n.runtime});n.json&&console.log(JSON.stringify(C,null,2)),C.summary.exitCode!==0&&process.exit(C.summary.exitCode);}else if(t==="explain"||t==="why"){let l=s(t),{parseWorkspaceExplainTarget:m}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:y,writeWorkspaceExplainReport:w}=await import('./workspace-explain-YB66UFAS.js'),g=(e??r??"").trim();!g&&n.scope&&(g=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),g||(g="release-blocked");let C=m(g);C||(console.log(a$2.red(`\u274C Invalid explain target: ${g}`)),process.exit(1));let x=await y({workspacePath:l,target:C}),R=n.write===true||i("--write"),b;if(R&&(b=await w(x,l,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$6(`workspace ${t}`,x,b),null,2));return}console.log(a$2.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${x.summary}`));for(let T of x.sections)console.log(a$2.bold(`
395
+ `,"utf8"),n.json?console.log(JSON.stringify(b$6(`workspace graph ${R}`,{format:R,entityCount:D.entities.length,relationCount:D.relations.length,proofCount:D.proofs.length},Y),null,2)):(console.log(a$2.green(`\u2714 Workspace knowledge graph exported as ${R}`)),console.log(a$2.gray(` Written: ${Y}`)));return}console.log(z);return}if(R==="explain"){let D=(n.scope?.replace(/^project:/,"")||r||"").trim();D||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(a$2.red("\u274C workspace graph explain requires a project.")),console.log(a$2.gray(" npx workspai workspace graph explain <project> --json")),console.log(a$2.gray(" npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let G=x(F,D);if(n.json){console.log(JSON.stringify(G,null,2)),G.found||process.exit(1);return}G.found||(console.log(a$2.red(`\u274C Project not found in dependency graph: ${D}`)),process.exit(1)),console.log(a$2.green(`\u2714 Graph explain: ${G.project}`)),G.centrality&&console.log(a$2.gray(` Centrality: fanIn ${G.centrality.fanIn}, fanOut ${G.centrality.fanOut}, reach ${G.centrality.reach}, betweenness ${G.centrality.betweenness}${G.centrality.isHotspot?" (hotspot)":""}`)),console.log(a$2.gray(` Direct dependents: ${G.directDependents.join(", ")||"none"}`)),console.log(a$2.gray(` Direct dependencies: ${G.directDependencies.join(", ")||"none"}`)),console.log(a$2.gray(` Blast radius (transitive dependents): ${G.transitiveDependents.length}`));for(let ne of G.transitiveDependents.slice(0,10))console.log(a$2.gray(` \u2022 ${ne.id} (d${ne.distance}, via ${ne.via??"\u2014"})`));return}if(R==="entities"){let D=await U(),{queryKnowledgeEntities:G}=await import('./workspace-knowledge-graph-query-GOC365ZR.js'),ne=(r||n.kind||"").trim()||void 0;if(ne){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:V}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');V.includes(ne)||(console.log(a$2.red(`\u274C Unknown graph entity kind: ${ne}`)),console.log(a$2.gray(` Supported: ${V.join(", ")}`)),process.exit(1));}let te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=G(D,ne,te),ee=n.limit??c("--limit"),Y=ee===void 0?void 0:Number.parseInt(ee,10);Y!==void 0&&(!Number.isFinite(Y)||Y<1||Y>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let _=Y===void 0?z:z.slice(0,Y);if(n.json){console.log(JSON.stringify({schemaVersion:D.schemaVersion,generatedAt:D.generatedAt,kind:ne??null,...te?{projectId:te}:{},count:_.length,totalMatches:z.length,truncated:_.length<z.length,entities:_},null,2));return}console.log(a$2.green(`\u2714 Workspace graph entities${ne?`: ${ne}`:""}`)),console.log(a$2.gray(` Count: ${_.length}/${z.length}${_.length<z.length?" (bounded)":""}`));for(let V of _)console.log(a$2.gray(` \u2022 ${V.kind}: ${V.label} [${V.id}]`));return}if(R==="benchmark-suite"){let D=(r||"agent-core.v1").trim(),{WORKSPACE_INTELLIGENCE_BENCHMARK_REPORT_PATH:G,WORKSPACE_INTELLIGENCE_BENCHMARK_SUITES:ne,buildWorkspaceIntelligenceBenchmark:te,writeWorkspaceIntelligenceBenchmark:z}=await import('./workspace-intelligence-benchmark-L46EGZZM.js');D in ne||(console.log(a$2.red(`\u274C Unknown benchmark suite: ${D}`)),console.log(a$2.gray(` Supported: ${Object.keys(ne).join(", ")}`)),process.exit(2));let ee=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(ee)||ee<1||ee>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let Y=await U(),_=await te({workspacePath:l,graph:Y,suite:D,limit:ee,...n.from?{baselineEvaluationPath:n.from}:{}}),K=n.write===true||i("--write")||!!p$1()?await z(l,_,p$1()??G):void 0;if(n.json){console.log(JSON.stringify(b$6("workspace graph benchmark-suite",_,K),null,2));return}console.log(a$2.green(`\u2714 Workspace Intelligence benchmark: ${_.suite.title}`)),console.log(a$2.gray(` Scenarios: ${_.retrievalSummary.matchedScenarioCount}/${_.retrievalSummary.scenarioCount} matched \xB7 ${_.retrievalSummary.status}`)),console.log(a$2.gray(` Median estimated retrieval: ${_.retrievalSummary.medianRetrievalEstimatedTokens} tokens \xB7 p95 ${_.retrievalSummary.p95RetrievalEstimatedTokens}`)),console.log(a$2.gray(` Median estimated payload reduction: ${_.retrievalSummary.medianEstimatedReductionPercent}%`)),console.log(a$2.gray(` Model evaluation: ${_.evaluation.availability} (${_.evaluation.provenance})`)),console.log(a$2.yellow(` ${_.methodology.claimBoundary}`)),K&&console.log(a$2.gray(` Written: ${K}`));return}if(R==="search"||R==="benchmark"){let D=(r||"").trim();D||(console.log(a$2.red(`\u274C workspace graph ${R} requires a search query.`)),console.log(a$2.gray(` npx workspai workspace graph ${R} "authentication endpoint" --json`)),process.exit(1));let G=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(G)||G<1||G>100)&&(console.log(a$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let ne=await U();if(R==="benchmark"){let _=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,{buildWorkspaceGraphTokenEfficiencyReport:V}=await import('./workspace-graph-token-efficiency-XM3LYFUC.js'),K=await V({workspacePath:l,graph:ne,query:D,limit:G,..._?{projectId:_}:{}});n.json?console.log(JSON.stringify(K,null,2)):(console.log(a$2.green(`\u2714 Graph retrieval benchmark: ${D}`)),console.log(a$2.gray(` Estimated tokens: ${K.corpus.estimatedTokens} corpus \u2192 ${K.retrieval.estimatedTokens} bounded retrieval`)),console.log(a$2.gray(` Estimated payload reduction: ${K.savings.reductionRatio}\xD7 (${K.savings.reductionPercent}%)`)),console.log(a$2.gray(` Matches: ${K.retrieval.matchCount}`)),console.log(a$2.yellow(` ${K.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:te}=await import('./workspace-knowledge-graph-query-GOC365ZR.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=n.kind?String(n.kind).trim():void 0;if(ee){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:_}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');_.includes(ee)||(console.log(a$2.red(`\u274C Unknown graph entity kind: ${ee}`)),console.log(a$2.gray(` Supported: ${_.join(", ")}`)),process.exit(1));}let Y=te(ne,{query:D,limit:G,...ee?{kind:ee}:{},...z?{projectId:z}:{},projection:"agent"});if(n.json)console.log(JSON.stringify(Y,null,2));else {console.log(a$2.green(`\u2714 Workspace graph search: ${D}`)),console.log(a$2.gray(` ${Y.entities.length}/${Y.totalMatches} match(es)${Y.truncated?" (bounded)":""}`));for(let _ of Y.entities)console.log(a$2.gray(` \u2022 ${_.kind}: ${_.label} [${_.id}]`));}return}if(R==="evidence"){let D=(r||"").trim();D||(console.log(a$2.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let G=await U(),{queryKnowledgeEvidence:ne}=await import('./workspace-knowledge-graph-query-GOC365ZR.js'),te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=ne(G,D,te);if(n.json)console.log(JSON.stringify(z,null,2));else if(z.found){console.log(a$2.green(`\u2714 Graph evidence: ${D}`));for(let ee of z.proofs)console.log(a$2.gray(` \u2022 ${ee.artifact}${ee.pointer?`#${ee.pointer}`:""} [${ee.provider}/${ee.trust}/${ee.confidence}]`));}else {console.log(a$2.red(z.candidates.length>0?`\u274C Graph query is ambiguous: ${D}`:`\u274C Graph entity or relation not found: ${D}`));for(let ee of z.candidates.slice(0,10))console.log(a$2.gray(` \u2022 ${ee}`));}z.found||process.exit(1);return}if(R==="path"){let D=(r||"").trim(),G=(o||"").trim();(!D||!G)&&(console.log(a$2.red("\u274C workspace graph path requires <from> and <to>.")),console.log(a$2.gray(" npx workspai workspace graph path <from> <to> --json")),process.exit(1));let ne=await U(),{queryKnowledgePath:te}=await import('./workspace-knowledge-graph-query-GOC365ZR.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=te(ne,D,G,z);if(n.json)console.log(JSON.stringify(ee,null,2));else if(ee.found){console.log(a$2.green(`\u2714 Graph proof path: ${D} \u2192 ${G}`));for(let Y of ee.hops)console.log(a$2.gray(` \u2022 ${Y.from} ${Y.direction==="forward"?"\u2192":"\u2190"} ${Y.to} [${Y.kind}]`));console.log(a$2.gray(` Proofs: ${ee.proofs.length}`));}else console.log(a$2.red(`\u274C No graph path found between ${D} and ${G}.`));ee.found||process.exit(1);return}if(R==="overlay"){let D=(n.from||r||"").trim();D||(console.log(a$2.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(a$2.gray(" npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let G=P.resolve(l,D),ne;try{ne=JSON.parse(await M__default.readFile(G,"utf8"));}catch(Ie){console.log(a$2.red(`\u274C Could not read the base knowledge graph: ${Ie instanceof Error?Ie.message:String(Ie)}`)),process.exit(1);}let te=ne&&typeof ne=="object"?ne:{},z=te.graph,ee=z&&typeof z=="object"?z:{},Y=te.schemaVersion===q.knowledgeGraph?te:te.knowledgeGraph??ee.knowledgeGraph;(!Y||typeof Y!="object"||Y.schemaVersion!==q.knowledgeGraph)&&(console.log(a$2.red(`\u274C Base file does not contain a ${q.knowledgeGraph} document.`)),process.exit(1));let _=await U(),{buildWorkspaceKnowledgeGraphChangeOverlay:V}=await import('./workspace-knowledge-graph-change-overlay-FIIAFLO6.js'),K=V(Y,_);if(n.json){console.log(JSON.stringify(K,null,2));return}console.log(a$2.green("\u2714 Workspace graph change overlay")),console.log(a$2.gray(` Base: ${D}`)),console.log(a$2.gray(` Risk: ${K.summary.risk}`)),console.log(a$2.gray(` Entities: +${K.summary.entityAdds} -${K.summary.entityRemovals} ~${K.summary.entityChanges}`)),console.log(a$2.gray(` Relations: +${K.summary.relationAdds} -${K.summary.relationRemovals} ~${K.summary.relationChanges}`)),console.log(a$2.gray(` Proofs: +${K.summary.proofAdds} -${K.summary.proofRemovals} ~${K.summary.proofChanges}`)),console.log(a$2.gray(` Impacted: ${K.summary.impactedEntities} entities \xB7 ${K.summary.changedArtifacts} proof artifacts`));return}let H=w(F),{writeWorkspaceModel:ie}=await import('./workspace-model-XSNLDUI2.js');await ie(J,l,{refreshKnowledgeGraph:j});let oe=await M__default.readJson(P.join(l,p.knowledgeGraph)),he={...H,knowledgeGraph:oe},Ke=p$1();if(Ke){let D=P.resolve(l,Ke);await M__default.outputFile(D,`${JSON.stringify(he,null,2)}
396
+ `,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace graph emit",{format:"json",nodeCount:F.stats.nodeCount,edgeCount:F.stats.edgeCount,entityCount:oe.entities.length,relationCount:oe.relations.length,proofCount:oe.proofs.length},D),null,2)):(console.log(a$2.green("\u2714 Workspace graph artifact exported as JSON")),console.log(a$2.gray(` Written: ${D}`)));return}if(n.json){console.log(JSON.stringify(he,null,2));return}console.log(a$2.green("\u2714 Workspace dependency graph")),console.log(a$2.gray(` Nodes: ${H.graph.stats.nodeCount}`)),console.log(a$2.gray(` Edges: ${H.graph.stats.edgeCount} (inferred ${H.graph.stats.inferredEdges}, contract ${H.graph.stats.contractEdges}, manual ${H.graph.stats.manualEdges})`)),console.log(a$2.gray(` Integrity: ${H.integrity.ok?"ok":"issues"} (cycles ${H.integrity.stats.cycleCount}, dangling ${H.integrity.stats.danglingCount}, orphans ${H.integrity.stats.orphanCount})`)),console.log(a$2.gray(` Hotspots: ${H.hotspots.join(", ")||"none"}`)),console.log(a$2.gray(` Knowledge: ${oe.quality.entityCount} entities \xB7 ${oe.quality.relationCount} relations \xB7 ${oe.quality.proofCount} proofs \xB7 ${oe.providers.length} providers`));let He=(oe.source.inputs?.scopes??[]).filter(D=>D.truncated),ve=oe.quality.completeness;if(He.length>0?console.log(a$2.yellow(` Inventory: emergency-bounded \u2014 ${He.map(D=>`${D.kind}:${D.id} indexed ${D.fileCount}/${D.eligibleFileCountExact===false?"at-least-":""}${D.eligibleFileCount??D.fileCount} eligible files`).join(", ")}`)):console.log(a$2.gray(` Inventory: complete \u2014 ${ve?.inventory.indexedFiles??(oe.source.inputs?.scopes??[]).reduce((D,G)=>D+G.fileCount,0)} eligible files indexed across ${ve?.inventory.scopeCount??(oe.source.inputs?.scopes??[]).length} scope(s)`)),ve){let D=`${ve.providers.complete} complete \xB7 ${ve.providers.bounded} adaptive-bounded \xB7 ${ve.providers.notApplicable} not-applicable \xB7 ${ve.providers.failed} failed`;console.log(ve.status==="complete"?a$2.gray(` Provider coverage: ${D}`):a$2.yellow(` Provider coverage: ${D}`));}console.log(a$2.gray(" Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(a$2.gray(" Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let l=s("watch"),{runWorkspaceWatch:m}=await import('./workspace-watch-PDQKYBYQ.js'),y=n.once===true||i("--once"),w=n.graphStream===true||i("--graph-stream"),g=n.json===true||w,C=w?new(await import('./workspace-graph-stream-YDEET5LK.js')).WorkspaceGraphStreamPublisher({workspacePath:l}):null,x=new AbortController,R=()=>x.abort();process.once("SIGINT",R),process.once("SIGTERM",R),g||console.log(a$2.green("\u2714 Workspace watch (model + graph kept in memory)")),await m({workspacePath:l,once:y,signal:x.signal,buildOptions:{workspacePath:l,observableScanDepth:d()},onProgress:b=>{g||console.error(a$2.gray(` ${b}`));},onModel:C?async b=>{let T=(await import('./workspace-model-XSNLDUI2.js')).workspaceModelProjectTopology(b);if(!T)return;let{buildWorkspaceKnowledgeGraph:j}=await import('./workspace-knowledge-graph-BNEVFEOW.js'),{readWorkspaceContract:A}=await import('./workspace-contract-2V2BI6A3.js'),O=null;try{O=(await A({workspacePath:l})).contract;}catch{}let J=await j({...u(),workspacePath:l,workspace:{name:b.workspace.name,...b.workspace.profile?{profile:b.workspace.profile}:{}},projects:b.projects.map(F=>({id:F.name,path:F.path,...F.absolutePath?{absolutePath:F.absolutePath}:{},runtime:F.runtime,runtimeCandidates:F.runtimeCandidates,framework:F.framework,...F.kit?{kit:F.kit}:{}})),projectTopology:T,contract:O,now:new Date(b.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-ZXYPIGCW.js')).hashWorkspaceModel(b)}});console.log(JSON.stringify(C.publish(b,J)));}:void 0,emit:b=>{if(w)return;if(g){console.log(JSON.stringify(b));return}if(b.kind==="ready"){console.log(a$2.gray(` Ready: ${b.graph.nodeCount} nodes, ${b.graph.edgeCount} edges (hash ${b.modelHash.slice(0,12)})`));return}if(b.kind==="error"){console.error(a$2.red(` \u2717 Rebuild failed: ${b.error??"unknown error"}`));return}if(b.kind==="unchanged"){console.log(a$2.gray(` No structural change (${b.mode}, ${b.durationMs}ms)`));return}let T=[];b.changedProjects.length>0&&T.push(`changed: ${b.changedProjects.join(", ")}`),b.addedProjects.length>0&&T.push(`added: ${b.addedProjects.join(", ")}`),b.removedProjects.length>0&&T.push(`removed: ${b.removedProjects.join(", ")}`),b.graph.edgesAdded.length>0&&T.push(`+${b.graph.edgesAdded.length} edges`),b.graph.edgesRemoved.length>0&&T.push(`-${b.graph.edgesRemoved.length} edges`),console.log(a$2.cyan(` \u21BB Changed (${b.mode}, ${b.durationMs}ms): ${T.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",R),process.removeListener("SIGTERM",R),!g&&!y&&console.log(a$2.gray(" Watch stopped."));return}else if(t==="sync"){let l=s("sync"),{syncWorkspaceProjects:m}=await import('./workspace-ROUEA3RT.js');n.json||console.log(a$2.cyan(`\u{1F4C2} Scanning workspace: ${P.basename(l)}`));let y=await m(l,n.json===true);await Yr(l,{silent:n.json===true});let{syncWorkspaceProjectLenses:w}=await import('./project-intelligence-lens-6Q6XSUDJ.js'),g=await w({workspacePath:l,mode:n.projectGrounding??"managed"}),{readWorkspaceRegistrySummary:C}=await import('./workspace-registry-summary-CBZDSG6I.js'),x=await C(l);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:l,registry:y,contractSynced:true,projectLenses:{synced:g.projects.length,skipped:g.skipped},registrySummary:x},null,2));}else if(t==="registry"){let l=s("registry"),m=e||"status";m!=="status"&&(console.log(a$2.red(`\u274C Unknown workspace registry action: ${m}`)),console.log(a$2.gray(" npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:y,resolveWorkspaceRegisteredProjects:w}=await import('./workspace-registry-summary-CBZDSG6I.js'),g=await y(l);if(n.json){console.log(JSON.stringify(g,null,2));return}let C=await w(l);console.log(a$2.cyan("Workspace registry")),console.log(a$2.gray(` Authority: ${g.authority}`)),console.log(a$2.gray(` Projects: ${g.projectCount}`)),console.log(a$2.gray(` Summary: ${g.registrySummaryPath}`)),C.summary.projectCount===0&&console.log(a$2.yellow(" No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let l=s("foundation"),m=e||"ensure";m!=="ensure"&&(console.log(a$2.red(`\u274C Unknown workspace foundation action: ${m}`)),console.log(a$2.gray(" npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:y}=await import('./workspace-foundation-H5B3TTZD.js'),w=await y(l,{force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(w,null,2));return}w.created.length>0?console.log(a$2.green(`\u2714 Workspace foundation ensured: ${w.created.join(", ")}`)):console.log(a$2.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let l=s("policy"),m=await Cg(l,e,r,o,n.json===true||i("--json"));m!==0&&process.exit(m);}else if(t==="contract"){let l=s("contract"),{buildWorkspaceContractGraph:m,readWorkspaceContract:y,syncWorkspaceContract:w,verifyWorkspaceContract:g,writeWorkspaceContract:C,WORKSPACE_CONTRACT_PATH:x}=await import('./workspace-contract-2V2BI6A3.js'),R=e||"inspect",b=p$1(),T=R==="graph"||R==="sync"?void 0:b;try{if(R==="init"){let j=await C({workspacePath:l,outputPath:T,force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract initialized: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`));return}if(R==="inspect"){let j=await y({workspacePath:l,contractPath:T});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract: ${j.contractPath}`)),console.log(a$2.gray(` Workspace: ${j.contract.workspace.name}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`)),console.log(a$2.gray(` Schema: v${j.contract.schemaVersion}`));return}if(R==="sync"){let j=await w({workspacePath:l,strict:n.strict===true||i("--strict")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract synchronized: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.contract.projects.length}`)),console.log(a$2.gray(` Added: ${j.addedProjects.join(", ")||"none"}`)),console.log(a$2.gray(` Updated: ${j.updatedProjects.join(", ")||"none"}`));return}if(R==="verify"){let j=await g({workspacePath:l,contractPath:T,strict:n.strict===true||i("--strict")}),{writeWorkspaceContractVerifyEvidence:A}=await import('./workspace-contract-2V2BI6A3.js'),O=await A({workspacePath:l,result:j});if(n.json)console.log(JSON.stringify({...j,evidencePath:O},null,2));else {let J=j.status==="passed"?a$2.green:a$2.red;console.log(J(`\u2714 Workspace contract verification ${j.status}: ${j.contractPath}`)),console.log(a$2.gray(` Projects: ${j.projectCount}`));for(let F of j.checks){let U=F.status==="passed"?"\u2714":"\u2718";console.log(a$2.gray(` ${U} ${F.id}: ${F.message}`));}for(let F of j.violations)console.log(a$2.gray(` Violation: ${F}`));}(j.status==="failed"||j.status!=="passed"&&n.strict)&&process.exit(1);return}if(R==="graph"){let j=await m({workspacePath:l,contractPath:T});if(b){let A=P.resolve(l,b);await M__default.outputFile(A,`${JSON.stringify(j,null,2)}
397
+ `,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace contract graph",{projectCount:j.graph.summary.projectCount,relationshipEdges:j.graph.summary.relationshipEdges,entityCount:j.graph.summary.entityCount,knowledgeRelations:j.graph.summary.knowledgeRelations,proofCount:j.graph.summary.proofCount},A),null,2)):(console.log(a$2.green("\u2714 Workspace contract graph exported as JSON")),console.log(a$2.gray(` Written: ${A}`)));return}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Workspace contract graph: ${j.contractPath}`)),console.log(a$2.gray(` Workspace: ${j.graph.workspace.name}`)),console.log(a$2.gray(` Projects: ${j.graph.summary.projectCount}`)),console.log(a$2.gray(` Dependencies: ${j.graph.summary.dependencyEdges}`)),console.log(a$2.gray(` Event links: ${j.graph.summary.eventEdges}`)),console.log(a$2.gray(` Evidence-backed relationships: ${j.graph.summary.relationshipEdges} (${j.graph.summary.inferredEdges} inferred, ${j.graph.summary.authoritativeEdges} authoritative)`)),console.log(a$2.gray(` Connected projects: ${j.graph.summary.connectedProjects}/${j.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(j.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(j.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(a$2.gray(` Orphans: ${j.graph.summary.orphanProjects} \xB7 Hotspots: ${j.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${j.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${j.graph.summary.hasCycle?"yes":"no"}`)),console.log(a$2.gray(` Knowledge: ${j.graph.summary.entityCount} entities \xB7 ${j.graph.summary.knowledgeRelations} relations \xB7 ${j.graph.summary.proofCount} proofs \xB7 ${j.graph.summary.providerCount} providers \xB7 ${j.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(a$2.gray(` Ports: ${j.graph.summary.portCount}`));for(let A of j.graph.nodes){let O=A.ports.map(F=>`${F.name}:${F.port}`).join(", ")||"none",J=A.operationalProfile?` risk=${A.operationalProfile.weight}/${A.operationalProfile.verificationPriority}`:"";console.log(a$2.gray(` \u2022 ${A.id} (${A.runtime||"unknown"}${A.framework?`/${A.framework}`:""}) ports=${O} manifests=${A.files.manifests.length}${J}`));}for(let A of j.graph.edges){let O=A.type==="event"?`event:${A.label}`:A.label;console.log(a$2.gray(` ${A.from} -> ${A.to} [${O}]`));}if(j.graph.dependencyGraph.edges.length>0){console.log(a$2.gray(" Evidence-backed dependency direction (consumer -> dependency):"));for(let A of j.graph.dependencyGraph.edges)console.log(a$2.gray(` ${A.from} -> ${A.to} [${A.kind}/${A.source}/${A.confidence}] evidence=${A.evidence.length}`));}for(let A of j.graph.dependencyGraph.diagnostics||[])console.log(a$2.gray(` ${A.severity}: ${A.message}`));return}console.log(a$2.red(`\u274C Unknown workspace contract action: ${R}`)),console.log(a$2.white(` npx workspai workspace contract init|inspect|sync|verify|graph [--output ${x}]`)),process.exit(1);}catch(j){n.json&&(console.log(JSON.stringify({command:`workspace contract ${R}`,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${R}.failed`,message:j.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace contract ${R} failed: ${j.message}`)),process.exit(1);}}else if(t==="share"){let l=s("share"),m=p$1()||e,{createWorkspaceShareBundle:y}=await import('./workspace-ROUEA3RT.js'),w=await y(l,{outputPath:m,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:l,bundlePath:w,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(a$2.green(`\u2714 Workspace share bundle exported: ${w}`)),console.log(a$2.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let l=s("export");try{let{exportWorkspaceArchive:m}=await import('./workspace-archive-OSMU3CK6.js'),y=n.archiveCompression?.trim().toLowerCase()??"store";if(y!=="store"&&y!=="deflate")throw new Error("--archive-compression must be store or deflate.");let w=await m({workspacePath:l,outputPath:p$1()||e,includeEnv:n.includeEnv===true||i("--include-env"),compression:y});if(n.json){console.log(JSON.stringify(w,null,2));return}let g=(w.bytesWritten/(1024*1024)).toFixed(2);console.log(a$2.green(`\u2714 Workspace archive exported: ${w.archivePath}`)),console.log(a$2.gray(` Files: ${w.manifest.files.length}`)),console.log(a$2.gray(` Size: ${g} MB`)),w.manifest.security.envFilesIncluded||console.log(a$2.gray(" Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(m){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:m.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace archive export failed: ${m.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let l=r;l||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(a$2.white(` npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:m,inspectWorkspaceArchive:y,verifyWorkspaceArchive:w}=await import('./workspace-archive-OSMU3CK6.js');try{if(e==="inspect"){let C=await y({archivePathOrUrl:l,safety:v()});if(n.json){console.log(JSON.stringify(C,null,2));return}let x=(C.totalBytes/(1024*1024)).toFixed(2);console.log(a$2.green(`\u2714 Workspace archive: ${C.archivePath}`)),console.log(a$2.gray(` Workspace: ${C.manifest.workspaceName}`)),console.log(a$2.gray(` Exported: ${C.manifest.exportedAt}`)),console.log(a$2.gray(` Exporter: ${C.manifest.exportedBy||"unknown"}`)),console.log(a$2.gray(` Files: ${C.fileCount}`)),console.log(a$2.gray(` Payload: ${x} MB`));return}if(e==="doctor"){let C=await m({archivePathOrUrl:l,strict:n.strict===true||i("--strict"),safety:v()});if(n.json)console.log(JSON.stringify(C,null,2));else {let x=C.status==="passed"?a$2.green:C.status==="warning"?a$2.yellow:a$2.red;console.log(x(`\u2714 Workspace archive doctor ${C.status}: ${C.archivePath}`)),console.log(a$2.gray(` Workspace: ${C.workspaceName}`)),console.log(a$2.gray(` Files: ${C.fileCount}`));for(let R of C.checks){let b=R.status==="passed"?"\u2714":R.status==="warning"?"\u26A0":"\u2718";console.log(a$2.gray(` ${b} ${R.id}: ${R.message}`));}for(let R of C.recommendedActions)console.log(a$2.gray(` Next: ${R}`));}(C.status==="failed"||C.status==="warning"&&n.strict)&&process.exit(1);return}let g=await w({archivePathOrUrl:l,requireChecksums:n.strict===true||i("--strict"),safety:v()});if(n.json)console.log(JSON.stringify(g,null,2));else if(g.status==="passed")console.log(a$2.green(`\u2714 Workspace archive verified: ${g.archivePath}`)),console.log(a$2.gray(` Files: ${g.verifiedFiles}/${g.fileCount}`));else {let C=g.status==="failed"?a$2.red:a$2.yellow;console.log(C(`\u274C Workspace archive verification ${g.status}: ${g.archivePath}`)),g.missingArchiveEntries.length&&console.log(a$2.gray(` Missing entries: ${g.missingArchiveEntries.join(", ")}`)),g.extraArchiveEntries.length&&console.log(a$2.gray(` Unexpected entries: ${g.extraArchiveEntries.join(", ")}`)),g.mismatches.length&&console.log(a$2.gray(` Mismatches: ${g.mismatches.map(x=>x.path).join(", ")}`)),g.missingChecksumFiles.length&&console.log(a$2.gray(` Missing checksums: ${g.missingChecksumFiles.join(", ")}`));}(g.status==="failed"||g.status==="warning"&&n.strict)&&process.exit(1);}catch(g){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:l,error:{code:`workspace.archive.${e}.failed`,message:g.message}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace archive ${e} failed: ${g.message}`)),process.exit(1);}}else if(t==="connect"){let l=P.resolve(e||process.cwd());try{let m=await Rs({workspacePath:l,dryRun:n.dryRun===true||i("--dry-run"),projectGrounding:n.projectGrounding});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(a$2.green(m.status==="preview"?`\u2714 Workspace connection preview: ${l}`:`\u2714 Workspace connected: ${l}`));for(let y of m.warnings)console.log(a$2.yellow(` \u26A0 ${y}`));}catch(m){let y=m instanceof Error?m.message:String(m);n.json?console.log(JSON.stringify(c$1({operation:"workspace connect",code:"workspace.connect.failed",message:y}),null,2)):console.log(a$2.red(`\u274C Workspace connect failed: ${y}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let l=e;l||(n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.input-required",message:"workspace import requires an archive path or URL."}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.hydrate.input-required",message:"workspace hydrate requires an archive path or URL."}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(a$2.white(` npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));try{if(t==="import"){let m=await As({archivePathOrUrl:l,outputPath:p$1(),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),projectGrounding:n.projectGrounding,safety:v()});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(a$2.green(m.status==="preview"?`\u2714 Workspace import preview: ${m.workspacePath}`:`\u2714 Workspace imported and registered: ${m.workspacePath}`));for(let y of m.warnings)console.log(a$2.yellow(` \u26A0 ${y}`));}else {let{hydrateWorkspaceArchive:m}=await import('./workspace-archive-OSMU3CK6.js'),y=await m({archivePathOrUrl:l,outputPath:p$1(),force:n.force===true||i("--force"),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),safety:v()});if(n.json){console.log(JSON.stringify(y,null,2));return}console.log(a$2.green(y.dryRun?`\u2714 Workspace archive hydrate preview: ${y.outputPath}`:`\u2714 Workspace archive hydrated: ${y.outputPath}`)),console.log(a$2.gray(` Files: ${y.files.length}`)),y.manifest?.workspaceName&&console.log(a$2.gray(` Workspace: ${y.manifest.workspaceName}`));}}catch(m){let y=m instanceof Error?m.message:String(m);n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.failed",message:y,context:{archivePathOrUrl:l,...p$1()?{outputPath:p$1()}:{}}}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:l,...p$1()?{outputPath:p$1()}:{},dryRun:n.dryRun===true||i("--dry-run"),error:{code:`workspace.${t}.failed`,message:y}},null,2)),process.exit(1)),console.log(a$2.red(`\u274C Workspace ${t} failed: ${y}`)),process.exit(1);}}else if(t==="run"){let l=s(`run ${e||""}`.trim()),m=new Set(["init","test","build","start"]),y=e?.trim()??"";y||(console.log(a$2.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(a$2.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(a$2.gray(" \u2022 init \u2014 run install/bootstrap across the project fleet")),console.log(a$2.gray(" \u2022 test \u2014 run test suite across selected projects")),console.log(a$2.gray(" \u2022 build \u2014 compile/package across selected projects")),console.log(a$2.gray(" \u2022 start \u2014 start services (smoke/e2e scenarios)")),console.log(a$2.gray(" \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(a$2.gray(" Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),m.has(y)||(!/^[a-z][a-z0-9_-]*$/i.test(y)||y==="dev"||y==="stop")&&(console.log(a$2.red(`Unknown workspace run stage: ${y}`)),console.log(a$2.gray("Available stages: init | test | build | start | <custom-from-context>")),y==="dev"&&console.log(a$2.gray(" Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2));let w=Ds({raw:n.maxWorkers,operation:`workspace run ${y}`,json:n.json===true||i("--json")});if(y==="init"&&n.json!==true){let x=await Bs(l);x!==0&&process.exit(x);}let{runWorkspaceStage:g}=await import('./workspace-run-I2W5PIPK.js'),C=await g({workspacePath:l,stage:y,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:w,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true,planOnly:n.plan===true,runtime:n.runtime});n.json&&console.log(JSON.stringify(C,null,2)),C.summary.exitCode!==0&&process.exit(C.summary.exitCode);}else if(t==="explain"||t==="why"){let l=s(t),{parseWorkspaceExplainTarget:m}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:y,writeWorkspaceExplainReport:w}=await import('./workspace-explain-IBMTRUSF.js'),g=(e??r??"").trim();!g&&n.scope&&(g=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),g||(g="release-blocked");let C=m(g);C||(console.log(a$2.red(`\u274C Invalid explain target: ${g}`)),process.exit(1));let x=await y({workspacePath:l,target:C}),R=n.write===true||i("--write"),b;if(R&&(b=await w(x,l,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$6(`workspace ${t}`,x,b),null,2));return}console.log(a$2.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${x.summary}`));for(let T of x.sections)console.log(a$2.bold(`
398
398
  ${T.title}`)),console.log(T.body);b&&console.log(a$2.gray(`
399
- Written: ${b}`));}else if(t==="trace"){let l=s("trace"),m=n.from||e;m||(console.log(a$2.red("\u274C workspace trace requires --from <diff-ref>")),console.log(a$2.gray(" npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:y}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:w,writeWorkspaceExplainReport:g}=await import('./workspace-explain-YB66UFAS.js'),C=y(m);(!C||C.kind!=="trace")&&(console.log(a$2.red(`\u274C Invalid trace ref: ${m}`)),console.log(a$2.gray(" Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let x=await w({workspacePath:l,target:C}),R=n.write===true||i("--write"),b;if(R&&(b=await g(x,l,"trace")),n.json){console.log(JSON.stringify(b$6("workspace trace",x,b),null,2));return}console.log(a$2.green(`\u2714 Workspace trace: ${x.summary}`));for(let T of x.sections)console.log(a$2.bold(`
399
+ Written: ${b}`));}else if(t==="trace"){let l=s("trace"),m=n.from||e;m||(console.log(a$2.red("\u274C workspace trace requires --from <diff-ref>")),console.log(a$2.gray(" npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:y}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:w,writeWorkspaceExplainReport:g}=await import('./workspace-explain-IBMTRUSF.js'),C=y(m);(!C||C.kind!=="trace")&&(console.log(a$2.red(`\u274C Invalid trace ref: ${m}`)),console.log(a$2.gray(" Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let x=await w({workspacePath:l,target:C}),R=n.write===true||i("--write"),b;if(R&&(b=await g(x,l,"trace")),n.json){console.log(JSON.stringify(b$6("workspace trace",x,b),null,2));return}console.log(a$2.green(`\u2714 Workspace trace: ${x.summary}`));for(let T of x.sections)console.log(a$2.bold(`
400
400
  ${T.title}`)),console.log(T.body);b&&console.log(a$2.gray(`
401
401
  Written: ${b}`));}else if(t==="eval"){let l=s("eval"),m=(e||"status").toLowerCase(),{WORKSPACE_EVALUATION_LAST_RUN_PATH:y,WORKSPACE_EVALUATION_LIVE_PATH:w,appendWorkspaceEvaluationEvent:g,compareWorkspaceEvaluations:C,createWorkspaceEvaluation:x,finalizeWorkspaceEvaluation:R,readWorkspaceEvaluation:b,writeWorkspaceEvaluation:T}=await import('./workspace-intelligence-evaluation-QDSOOUHH.js');if(m==="init"){let j=(r||"").trim(),A=(o||"workspace-intelligence").trim(),O=["full-corpus","grep","vector","graph","workspace-intelligence","custom"];(!j||!O.includes(A))&&(console.log(a$2.red("\u274C workspace eval init requires <task> and an optional valid strategy.")),console.log(a$2.gray(` Strategies: ${O.join(" | ")}
402
- npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:J}=await import('./workspace-marker-XGAWZZDX.js'),F=await J(l),U=x({workspacePath:l,workspaceName:F?.name,taskId:j,strategy:A}),H=await T(l,U);if(n.json){console.log(JSON.stringify(b$6("workspace eval init",U,H),null,2));return}console.log(a$2.green(`\u2714 Evaluation started: ${j}`)),console.log(a$2.gray(` Run: ${U.runId}`)),console.log(a$2.gray(` Strategy: ${U.configuration.strategy}`)),console.log(a$2.gray(` Live: ${H}`));return}if(m==="record"){!n.json&&!i("--json")&&(console.log(a$2.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(a$2.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:j,readStdinAll:A}=await import('./workspace-feedback-D6HJLKBQ.js'),O=j(await A());O||(console.log(a$2.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let J=await g({workspacePath:l,payload:O});console.log(JSON.stringify(J,null,2));}catch(J){console.log(JSON.stringify(c$1({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:J instanceof Error?J.message:String(J),context:{workspacePath:l}}),null,2)),process.exit(1);}return}if(m==="report"){let j=await R({workspacePath:l}),A=p$1(),O=j.outputPath;if(A){let J=P.resolve(l,A);P.resolve(j.outputPath)!==J&&await M__default.copy(j.outputPath,J,{overwrite:true}),O=J;}if(n.json){console.log(JSON.stringify(b$6("workspace eval report",j.report,O),null,2));return}console.log(a$2.green(`\u2714 Evaluation finalized: ${j.report.runId}`)),console.log(a$2.gray(` Tokens: ${j.report.summary.tokens.observedTotal} \xB7 model calls ${j.report.summary.modelCalls} \xB7 tool calls ${j.report.summary.toolCalls}`)),console.log(a$2.gray(` Outcome: ${j.report.summary.outcome.status}${j.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(a$2.gray(` Written: ${O}`));return}if(m==="compare"){let j=(n.from||r||"").trim();j||(console.log(a$2.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let A=await b(l,y),O=await b(l,j),J=C(A,O);if(n.json){console.log(JSON.stringify(J,null,2));return}console.log(a$2.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(a$2.gray(` Task aligned: ${J.taskAligned?"yes":"no"}`)),console.log(a$2.gray(` Token delta: ${J.delta.tokens}`)),console.log(a$2.gray(` Reduction: ${J.delta.reductionPercent===null?"unavailable":`${J.delta.reductionPercent}%`}`)),console.log(a$2.gray(` Comparable verified outcome: ${J.comparableOutcome?"yes":"no"}`));return}if(m==="status"){let j;try{j=await b(l,w);}catch{j=await b(l,y);}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Evaluation ${j.status}: ${j.configuration.taskId}`)),console.log(a$2.gray(` Run: ${j.runId}`)),console.log(a$2.gray(` Events: ${j.events.length}`)),console.log(a$2.gray(` Tokens: ${j.summary.tokens.observedTotal} (${j.summary.tokenSources.providerReported} provider-reported calls, ${j.summary.tokenSources.estimated} estimated calls)`));return}console.log(a$2.red(`Unknown eval action: ${m}`)),console.log(a$2.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let l=s("feedback"),m=(e||"record").toLowerCase();m!=="record"&&(console.log(a$2.red(`Unknown feedback action: ${m}`)),console.log(a$2.gray("Available: record")),process.exit(1)),!n.json&&!i("--json")&&(console.log(a$2.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(a$2.gray(` echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(a$2.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(a$2.gray(` echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:y,parseFeedbackStdinPayload:w,readStdinAll:g}=await import('./workspace-feedback-D6HJLKBQ.js'),C=await g(),x=w(C);x||(console.log(a$2.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let R=await y({workspacePath:l,payload:x});n.json?console.log(JSON.stringify(R,null,2)):R.ok?(console.log(a$2.green("\u2714 Workspace feedback recorded")),console.log(a$2.gray(` History: ${R.historyPath}`))):console.log(a$2.red(`\u274C ${R.error??"Failed to record feedback"}`)),R.ok||process.exit(1);}else if(t==="goal"){let l=s("goal"),m=(e||"status").toLowerCase(),y=r?.trim(),{planVerifiedGoal:w,readVerifiedGoal:g,verifyVerifiedGoal:C,VERIFIED_GOAL_SCHEMA_VERSION:x}=await import('./verified-goal-BSREU6R7.js'),R=b=>{if(n.json){console.log(JSON.stringify(b,null,2));return}let T=b.goal;console.log(b.status.state==="verified"?a$2.green("\u2714 Verified goal satisfied"):a$2.cyan(b.resumed?"\u21BB Verified goal resumed":"\u25C6 Verified goal ready")),T&&console.log(a$2.bold(` ${T.summary}`)),console.log(a$2.gray(` Goal: ${b.status.goalId}`)),console.log(a$2.gray(` Progress: ${b.status.progress.message}`)),console.log(a$2.gray(` State: ${b.status.state}`)),b.status.blockingReasons.length>0&&console.log(a$2.gray(` Remaining: ${b.status.blockingReasons[0]}`)),b.status.nextActions.length>0&&console.log(a$2.gray(` Next: ${b.status.nextActions[0]}`)),console.log(a$2.gray(` Status: ${b.status.artifactPath}`));};if(m==="plan"){if(!y||!["release-readiness","dependency-security","test-coverage"].includes(y)){let J="Goal kind must be release-readiness, dependency-security, or test-coverage.";n.json?console.log(JSON.stringify(c$1({operation:"workspace goal plan",code:"workspace.goal.kind.invalid",message:J}),null,2)):console.log(a$2.red(`\u274C ${J}`)),process.exit(1);}let T=Number(n.target??80);if(!Number.isFinite(T)||T<0||T>100)throw new Error("--target must be a number from 0 to 100.");let j=["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"],A=n.runtime;if(y==="test-coverage"&&A!==void 0&&!j.includes(A))throw new Error(`--runtime must be one of: ${j.join(", ")}.`);let O=await w({workspacePath:l,kind:y,scope:n.scope,target:T,runtime:y==="test-coverage"?A:void 0,allowBreakingChanges:n.allowBreaking===true,allowForce:n.allowForce===true,requireBuild:n.build!==false,requireTests:n.tests!==false});R(O);}else if(m==="status"){if(!y)throw new Error("workspace goal status requires a goal id.");let b=await g(l,y);R({...b,resumed:b.status.state!=="verified"});}else if(m==="verify"){if(!y)throw new Error("workspace goal verify requires a goal id.");let b=await g(l,y),T=await C({workspacePath:l,goalId:y,run:n.run!==false,runIntelligence:n.reuseIntelligence!==true});R({goal:b.goal,status:T}),T.state!=="verified"&&process.exit(2);}else {let b=`Unknown workspace goal action: ${m}`;n.json?console.log(JSON.stringify(c$1({operation:"workspace goal",code:"workspace.goal.action.invalid",message:b,context:{schemaVersion:x,availableActions:["plan","status","verify"]}}),null,2)):console.log(a$2.red(`\u274C ${b}`)),process.exit(1);}}else if(t==="mcp"){let l=s("mcp"),m=(e||"serve").toLowerCase();m!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:m,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${m}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(a$2.red(`Unknown mcp action: ${m}`)),console.log(a$2.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:y}=await import('./workspace-mcp-serve-KSZ2O66S.js');n.json||console.error(a$2.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await y({workspacePath:l});}else if(t==="init"){n.json||(console.log(a$2.yellow("\u2139 workspace init is an alias of: npx workspai workspace run init")),console.log(a$2.gray(` Equivalent full-init aliases at workspace root:
402
+ npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:J}=await import('./workspace-marker-XGAWZZDX.js'),F=await J(l),U=x({workspacePath:l,workspaceName:F?.name,taskId:j,strategy:A}),H=await T(l,U);if(n.json){console.log(JSON.stringify(b$6("workspace eval init",U,H),null,2));return}console.log(a$2.green(`\u2714 Evaluation started: ${j}`)),console.log(a$2.gray(` Run: ${U.runId}`)),console.log(a$2.gray(` Strategy: ${U.configuration.strategy}`)),console.log(a$2.gray(` Live: ${H}`));return}if(m==="record"){!n.json&&!i("--json")&&(console.log(a$2.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(a$2.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:j,readStdinAll:A}=await import('./workspace-feedback-D6HJLKBQ.js'),O=j(await A());O||(console.log(a$2.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let J=await g({workspacePath:l,payload:O});console.log(JSON.stringify(J,null,2));}catch(J){console.log(JSON.stringify(c$1({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:J instanceof Error?J.message:String(J),context:{workspacePath:l}}),null,2)),process.exit(1);}return}if(m==="report"){let j=await R({workspacePath:l}),A=p$1(),O=j.outputPath;if(A){let J=P.resolve(l,A);P.resolve(j.outputPath)!==J&&await M__default.copy(j.outputPath,J,{overwrite:true}),O=J;}if(n.json){console.log(JSON.stringify(b$6("workspace eval report",j.report,O),null,2));return}console.log(a$2.green(`\u2714 Evaluation finalized: ${j.report.runId}`)),console.log(a$2.gray(` Tokens: ${j.report.summary.tokens.observedTotal} \xB7 model calls ${j.report.summary.modelCalls} \xB7 tool calls ${j.report.summary.toolCalls}`)),console.log(a$2.gray(` Outcome: ${j.report.summary.outcome.status}${j.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(a$2.gray(` Written: ${O}`));return}if(m==="compare"){let j=(n.from||r||"").trim();j||(console.log(a$2.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let A=await b(l,y),O=await b(l,j),J=C(A,O);if(n.json){console.log(JSON.stringify(J,null,2));return}console.log(a$2.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(a$2.gray(` Task aligned: ${J.taskAligned?"yes":"no"}`)),console.log(a$2.gray(` Token delta: ${J.delta.tokens}`)),console.log(a$2.gray(` Reduction: ${J.delta.reductionPercent===null?"unavailable":`${J.delta.reductionPercent}%`}`)),console.log(a$2.gray(` Comparable verified outcome: ${J.comparableOutcome?"yes":"no"}`));return}if(m==="status"){let j;try{j=await b(l,w);}catch{j=await b(l,y);}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(a$2.green(`\u2714 Evaluation ${j.status}: ${j.configuration.taskId}`)),console.log(a$2.gray(` Run: ${j.runId}`)),console.log(a$2.gray(` Events: ${j.events.length}`)),console.log(a$2.gray(` Tokens: ${j.summary.tokens.observedTotal} (${j.summary.tokenSources.providerReported} provider-reported calls, ${j.summary.tokenSources.estimated} estimated calls)`));return}console.log(a$2.red(`Unknown eval action: ${m}`)),console.log(a$2.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let l=s("feedback"),m=(e||"record").toLowerCase();m!=="record"&&(console.log(a$2.red(`Unknown feedback action: ${m}`)),console.log(a$2.gray("Available: record")),process.exit(1)),!n.json&&!i("--json")&&(console.log(a$2.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(a$2.gray(` echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(a$2.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(a$2.gray(` echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:y,parseFeedbackStdinPayload:w,readStdinAll:g}=await import('./workspace-feedback-D6HJLKBQ.js'),C=await g(),x=w(C);x||(console.log(a$2.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let R=await y({workspacePath:l,payload:x});n.json?console.log(JSON.stringify(R,null,2)):R.ok?(console.log(a$2.green("\u2714 Workspace feedback recorded")),console.log(a$2.gray(` History: ${R.historyPath}`))):console.log(a$2.red(`\u274C ${R.error??"Failed to record feedback"}`)),R.ok||process.exit(1);}else if(t==="goal"){let l=s("goal"),m=(e||"status").toLowerCase(),y=r?.trim(),{planVerifiedGoal:w,readVerifiedGoal:g,verifyVerifiedGoal:C,VERIFIED_GOAL_SCHEMA_VERSION:x}=await import('./verified-goal-GRH5UOJR.js'),R=b=>{if(n.json){console.log(JSON.stringify(b,null,2));return}let T=b.goal;console.log(b.status.state==="verified"?a$2.green("\u2714 Verified goal satisfied"):a$2.cyan(b.resumed?"\u21BB Verified goal resumed":"\u25C6 Verified goal ready")),T&&console.log(a$2.bold(` ${T.summary}`)),console.log(a$2.gray(` Goal: ${b.status.goalId}`)),console.log(a$2.gray(` Progress: ${b.status.progress.message}`)),console.log(a$2.gray(` State: ${b.status.state}`)),b.status.blockingReasons.length>0&&console.log(a$2.gray(` Remaining: ${b.status.blockingReasons[0]}`)),b.status.nextActions.length>0&&console.log(a$2.gray(` Next: ${b.status.nextActions[0]}`)),console.log(a$2.gray(` Status: ${b.status.artifactPath}`));};if(m==="plan"){if(!y||!["release-readiness","dependency-security","test-coverage"].includes(y)){let J="Goal kind must be release-readiness, dependency-security, or test-coverage.";n.json?console.log(JSON.stringify(c$1({operation:"workspace goal plan",code:"workspace.goal.kind.invalid",message:J}),null,2)):console.log(a$2.red(`\u274C ${J}`)),process.exit(1);}let T=Number(n.target??80);if(!Number.isFinite(T)||T<0||T>100)throw new Error("--target must be a number from 0 to 100.");let j=["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"],A=n.runtime;if(y==="test-coverage"&&A!==void 0&&!j.includes(A))throw new Error(`--runtime must be one of: ${j.join(", ")}.`);let O=await w({workspacePath:l,kind:y,scope:n.scope,target:T,runtime:y==="test-coverage"?A:void 0,allowBreakingChanges:n.allowBreaking===true,allowForce:n.allowForce===true,requireBuild:n.build!==false,requireTests:n.tests!==false});R(O);}else if(m==="status"){if(!y)throw new Error("workspace goal status requires a goal id.");let b=await g(l,y);R({...b,resumed:b.status.state!=="verified"});}else if(m==="verify"){if(!y)throw new Error("workspace goal verify requires a goal id.");let b=await g(l,y),T=await C({workspacePath:l,goalId:y,run:n.run!==false,runIntelligence:n.reuseIntelligence!==true});R({goal:b.goal,status:T}),T.state!=="verified"&&process.exit(2);}else {let b=`Unknown workspace goal action: ${m}`;n.json?console.log(JSON.stringify(c$1({operation:"workspace goal",code:"workspace.goal.action.invalid",message:b,context:{schemaVersion:x,availableActions:["plan","status","verify"]}}),null,2)):console.log(a$2.red(`\u274C ${b}`)),process.exit(1);}}else if(t==="mcp"){let l=s("mcp"),m=(e||"serve").toLowerCase();m!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:m,result:"error",workspacePath:l,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${m}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(a$2.red(`Unknown mcp action: ${m}`)),console.log(a$2.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:y}=await import('./workspace-mcp-serve-JLZTTEVG.js');n.json||console.error(a$2.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await y({workspacePath:l});}else if(t==="init"){n.json||(console.log(a$2.yellow("\u2139 workspace init is an alias of: npx workspai workspace run init")),console.log(a$2.gray(` Equivalent full-init aliases at workspace root:
403
403
  npx workspai init | npx workspai workspace init | npx workspai workspace run init
404
- `)));let l=s("init"),m=Ds({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||i("--json")});if(n.json!==true){let g=await Bs(l);g!==0&&process.exit(g);}let{runWorkspaceStage:y}=await import('./workspace-run-HFOY2UYT.js'),w=await y({workspacePath:l,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:m,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(w,null,2)),w.summary.exitCode!==0&&process.exit(w.summary.exitCode);}else (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:Vr}}),null,2)),process.exit(1)),console.log(a$2.red(`Unknown workspace action: ${t}`)),console.log(a$2.gray(`Available: ${Vr.join(", ")}`)),process.exit(1);});function Br(t){let e="\u2500".repeat(46);console.log(""),console.log(a$2.gray(e)),console.log(a$2.bold(t)),console.log(a$2.gray(e));}function td(){let t=n=>n.replace(/\bnpx (?:rapidkit|workspai)\b/g,Ms),e=(n,s)=>{let i=t(n);if(i.length>65){console.log(a$2.cyan(` ${i}`)),console.log(a$2.gray(` ${s}`));return}console.log(a$2.cyan(` ${i.padEnd(67)} `)+a$2.gray(s));},r=(n,s)=>{console.log(a$2.white(` ${n}`));for(let i=0;i<s.length;i+=8)console.log(a$2.gray(` ${s.slice(i,i+8).join(" \xB7 ")}`));};console.log(a$2.white(`Usage:
404
+ `)));let l=s("init"),m=Ds({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||i("--json")});if(n.json!==true){let g=await Bs(l);g!==0&&process.exit(g);}let{runWorkspaceStage:y}=await import('./workspace-run-I2W5PIPK.js'),w=await y({workspacePath:l,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:m,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(w,null,2)),w.summary.exitCode!==0&&process.exit(w.summary.exitCode);}else (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:Vr}}),null,2)),process.exit(1)),console.log(a$2.red(`Unknown workspace action: ${t}`)),console.log(a$2.gray(`Available: ${Vr.join(", ")}`)),process.exit(1);});function Br(t){let e="\u2500".repeat(46);console.log(""),console.log(a$2.gray(e)),console.log(a$2.bold(t)),console.log(a$2.gray(e));}function td(){let t=n=>n.replace(/\bnpx (?:rapidkit|workspai)\b/g,Ms),e=(n,s)=>{let i=t(n);if(i.length>65){console.log(a$2.cyan(` ${i}`)),console.log(a$2.gray(` ${s}`));return}console.log(a$2.cyan(` ${i.padEnd(67)} `)+a$2.gray(s));},r=(n,s)=>{console.log(a$2.white(` ${n}`));for(let i=0;i<s.length;i+=8)console.log(a$2.gray(` ${s.slice(i,i+8).join(" \xB7 ")}`));};console.log(a$2.white(`Usage:
405
405
  `)),console.log(a$2.cyan(` ${Ms} <command> [options]
406
406
  `)),xg==="rapidkit"&&console.log(a$2.gray(` You are using the legacy rapidkit alias. New docs use ${Ms}.
407
407
  `)),console.log(a$2.bold(`Open-Source Workspace Intelligence for Software Systems