workspai 0.75.0 → 0.75.1

package/dist/index.js

@@ -1,66 +1,66 @@
 #!/usr/bin/env node
-import {a as a$p}from'./chunk-ICGWHIMK.js';import {a as a$u}from'./chunk-DJH2CH42.js';import {c as c$a,b as b$f,a as a$t}from'./chunk-ZS7JHATN.js';import {d as d$3,c as c$3,p as p$4,b as b$k,a as a$K}from'./chunk-NLRZFIC6.js';import {h as h$2,b as b$g,a as a$B}from'./chunk-LDBULT2T.js';import {c,d,e as e$1,k,i,j as j$1,s as s$1,m as m$1,o as o$3,q as q$3,p as p$6,n as n$2,r as r$1,b as b$l,a as a$M,l as l$6}from'./chunk-YP436V7Q.js';import {a as a$l}from'./chunk-MXI2DWLL.js';import {a as a$j}from'./chunk-TXVMHEJS.js';import {a as a$v}from'./chunk-RPM67N7A.js';import {m,o as o$1,p as p$1,c as c$8,n as n$3,f as f$2,d as d$9,e as e$d,a as a$Q,h as h$6,q as q$4,g as g$b,r as r$5,i as i$5,s as s$5,l as l$8,k as k$6}from'./chunk-J4J3RYCL.js';import {d as d$4,a as a$n,g as g$6,e as e$8,j as j$6}from'./chunk-V4LCPLV6.js';import {c as c$1,b as b$5,a as a$L}from'./chunk-LPCWROQ3.js';import {b as b$3,a as a$7}from'./chunk-4DX4HBG3.js';import {b as b$e,a as a$r,c as c$9}from'./chunk-RX3U7JKF.js';import {j as j$4,a as a$d,k as k$3}from'./chunk-ZW4QV6SB.js';import {b as b$8,g as g$4,c as c$g,a as a$J}from'./chunk-GIFAGOMK.js';import {b as b$7,a as a$a}from'./chunk-D5LLTUTY.js';import {c as c$5,d as d$6,e as e$5,b as b$d,g as g$5}from'./chunk-HLSOZOL3.js';import {b as b$a,a as a$o}from'./chunk-O5XQP5E7.js';import {m as m$4,g as g$8,e as e$c,c as c$d,b as b$h,a as a$F}from'./chunk-36VNERGC.js';import {a as a$m,c as c$e,b as b$i}from'./chunk-CGNMS32W.js';import {a,b}from'./chunk-B6FJ6RG6.js';import {b as b$6,d as d$7,c as c$6,a as a$6,f as f$7,e as e$e}from'./chunk-XF65LQ6M.js';import {a as a$s}from'./chunk-RU3UT7GJ.js';import {a as a$w}from'./chunk-ZKYH44ER.js';import {a as a$q}from'./chunk-IVYPC36J.js';import {e as e$3,d as d$5}from'./chunk-QYEQVNBF.js';import {a as a$z}from'./chunk-4KEZQLBU.js';import {a as a$E}from'./chunk-COICGD62.js';import {c as c$b,a as a$A}from'./chunk-G3ZC5W4U.js';import {a as a$I,b as b$j}from'./chunk-N4B2M44I.js';import {a as a$H}from'./chunk-NS53IPAC.js';import {f as f$4}from'./chunk-WOPZX56J.js';import {a as a$i}from'./chunk-FS3WLRQ4.js';import {b as b$4,a as a$2,d as d$2}from'./chunk-OA2YJN22.js';import {f,e as e$2,a as a$5,d as d$8,i as i$3,g as g$9}from'./chunk-VHMDWRDG.js';import {a as a$c}from'./chunk-GE46XKD2.js';import {a as a$9}from'./chunk-A5FBGRJA.js';import {a as a$y}from'./chunk-HCFOVANQ.js';import {l as l$2,e as e$a,c as c$c,a as a$N,b as b$m,m as m$8,k as k$5}from'./chunk-O2CFT2A3.js';import {j,a as a$1,F,D as D$1,A,z,y,x,w as w$1,v as v$2,n as n$5,m as m$6,o as o$5,I,s as s$3,B,C as C$1,l as l$5,r as r$4,H,J,p as p$7,u as u$2,t as t$3,E as E$1}from'./chunk-CMLLERGG.js';import {b as b$9,a as a$f}from'./chunk-DFREJHG7.js';import {a as a$h}from'./chunk-NMXGSVMD.js';import {c as c$4,g as g$2,b as b$c,a as a$k,e as e$9,l as l$4}from'./chunk-LMOTDLJF.js';import {b as b$1,d as d$1,a as a$3,e as e$4,D,C,j as j$2,k as k$2,m as m$2,n as n$1,o as o$2,l,t as t$2,p as p$5,F as F$1,r as r$3,h as h$4,s as s$4,E,G,u as u$1,f as f$6,x as x$1,w as w$3,v as v$3,z as z$1}from'./chunk-OH6LV5JP.js';export{s as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-OH6LV5JP.js';import {m as m$3,j as j$5,l as l$1}from'./chunk-7NKM6EHE.js';import {a as a$g}from'./chunk-GR6442P7.js';import {g as g$1,a as a$b,e as e$6,b as b$o,h as h$5}from'./chunk-BLEIUQL6.js';import {b as b$p}from'./chunk-VN2MKTQO.js';import {a as a$4}from'./chunk-AFIFZTOY.js';import {a as a$P}from'./chunk-XWKGZRHN.js';import {b as b$b}from'./chunk-252EKOR6.js';import {c as c$h}from'./chunk-EWZZUQBR.js';import {o,b as b$2,p as p$3,q as q$2,r,m as m$7,i as i$4,j as j$8,e as e$f,g as g$a,c as c$i}from'./chunk-RGNCL5OB.js';import {h,e,g,c as c$2,a as a$8,f as f$3}from'./chunk-6B7L4NZE.js';import {a as a$e}from'./chunk-TQEMLBAG.js';import {c as c$j}from'./chunk-2FIX2MDC.js';import {a as a$D}from'./chunk-64XWHDZ3.js';import {c as c$7}from'./chunk-25AWHAB5.js';import {a as a$C}from'./chunk-W37NOQVG.js';import {n,f as f$1,u,p as p$2,w,q as q$1,k as k$1,t as t$1,v as v$1,j as j$3,g as g$3,h as h$1,i as i$1,e as e$7,a as a$O,b as b$n,l as l$7,o as o$6}from'./chunk-VQZ5PI5J.js';import {v,t,p,q,s as s$2,r as r$2,o as o$4,n as n$4,m as m$5,k as k$4,j as j$7,i as i$2,h as h$3,l as l$3,g as g$7,e as e$b,f as f$5,c as c$f,a as a$G,w as w$2}from'./chunk-ODK4LCEL.js';import {a as a$x}from'./chunk-FB7SCXAZ.js';import {Command,Option}from'commander';import s from'chalk';import P from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import Zg from'vm';import*as M from'fs-extra';import M__default from'fs-extra';import O,{existsSync,promises,createWriteStream}from'fs';import ha,{tmpdir,homedir}from'os';import {execa}from'execa';import It,{createHash,randomUUID,createVerify,createHmac}from'crypto';import yd from'http';import kd from'https';function lu(){return j$8()}function pu(t,e){return t==="py"?["-3",...e]:e}function du(t){return typeof t=="object"&&t!==null}async function uu(t,e,r,o=c$j()){try{let n=await execa(t,e,{cwd:r,timeout:o,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function mu(t,e){let r=["-m","rapidkit",...t],o=lu();for(let n of o){let a=await uu(n,pu(n,r),e?.cwd,e?.timeoutMs);if(!a.ok)continue;let i=(a.stdout??"").trim();try{let c=JSON.parse(i);return du(c)?{ok:true,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr,data:c}:{ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}catch{return {ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}}return {ok:false}}async function yl(t,e){let r=await mu(["project","detect","--path",t,"--json"],e);return !r.ok||!r.data||r.data.schema_version!==1?{ok:false,command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}:r}var kl=new Set(["create"]),da=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),gu=new Set(["pip","poetry","venv","pipx","python","uv"]);function vl(t){return typeof t=="string"&&gu.has(t)}function ua(t,e){return !t||kl.has(t)?false:a$5.has(t)?true:e?.has(t)??false}function ma(t,e=null){let r=t[0];return !r||r.startsWith("-")||kl.has(r)||r==="init"?false:ua(r,e)?true:t.filter(n=>!n.startsWith("-")&&!da.has(n)).length<=1?false:t.length>1}var lr=P.join(ha.homedir(),".workspairc.json"),fu=P.join(ha.homedir(),".rapidkitrc.json"),hu=P.join(ha.homedir(),".rapidkit","config.json");function ga(t){try{if(!O.existsSync(t))return {};let e=O.readFileSync(t,"utf-8"),r=JSON.parse(e);return !r||typeof r!="object"||Array.isArray(r)?{}:r}catch{return {}}}function Pl(t){if(process.platform!=="win32")try{O.chmodSync(t,384);}catch{}}function pr(){let t=ga(lr),e=ga(fu),r=ga(hu);return O.existsSync(lr)&&Pl(lr),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??r.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??r.aiEnabled,telemetry:t.telemetry??e.telemetry??r.telemetry}}function Uo(t){let r={...pr(),...t};O.writeFileSync(lr,JSON.stringify(r,null,2),{encoding:"utf-8",mode:384}),Pl(lr);}function Br(){return process.env.OPENAI_API_KEY||pr().openaiApiKey||null}function wa(){return pr().aiEnabled!==false}function ya(){return lr}function jl(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async r=>{let o=r.key;o?o.startsWith("sk-")||(console.log(s.red(`
+import {a as a$q}from'./chunk-ICGWHIMK.js';import {a as a$v}from'./chunk-DJH2CH42.js';import {c as c$a,b as b$i,a as a$u}from'./chunk-ZS7JHATN.js';import {d as d$3,c as c$3,p as p$4,b as b$n,a as a$L}from'./chunk-NLRZFIC6.js';import {h as h$2,b as b$j,a as a$C}from'./chunk-LDBULT2T.js';import {c,d,e as e$1,k,i,j as j$1,s as s$1,m as m$1,o as o$3,q as q$3,p as p$6,n as n$2,r as r$1,b as b$o,a as a$N,l as l$6}from'./chunk-65AE7EC5.js';import {a as a$m}from'./chunk-HDISUL3F.js';import {a as a$k}from'./chunk-ABUSBLBH.js';import {a as a$w}from'./chunk-RPM67N7A.js';import {m,o as o$1,p as p$1,c as c$8,n as n$3,f as f$2,d as d$9,e as e$d,a as a$Q,h as h$6,q as q$4,g as g$b,r as r$5,i as i$5,s as s$5,l as l$8,k as k$6}from'./chunk-6NSJBKKK.js';import {d as d$4,a as a$o,g as g$6,e as e$8,j as j$6}from'./chunk-V4LCPLV6.js';import {c as c$1,b as b$6,a as a$M}from'./chunk-LPCWROQ3.js';import {b as b$4,a as a$7}from'./chunk-WPPRUFJW.js';import {b as b$h,a as a$s,c as c$9}from'./chunk-AICCXYY5.js';import {j as j$4,a as a$d,k as k$3}from'./chunk-3WQ5TYCO.js';import {b as b$a,g as g$4,c as c$g,a as a$K}from'./chunk-SCKEFXF5.js';import {b as b$9,a as a$a}from'./chunk-D5LLTUTY.js';import {c as c$5,d as d$6,e as e$5,b as b$g,g as g$5}from'./chunk-6KMR5PKQ.js';import {b as b$d,a as a$p}from'./chunk-O5XQP5E7.js';import {m as m$4,g as g$8,e as e$c,c as c$d,b as b$k,a as a$G}from'./chunk-QBKOPXKC.js';import {a as a$n,c as c$e,b as b$l}from'./chunk-566NQQTJ.js';import {a,b as b$1}from'./chunk-B6FJ6RG6.js';import {b as b$7,d as d$7,c as c$6,a as a$6,f as f$7,e as e$e}from'./chunk-XF65LQ6M.js';import {a as a$t}from'./chunk-RU3UT7GJ.js';import {a as a$x}from'./chunk-ZKYH44ER.js';import {a as a$r}from'./chunk-IVYPC36J.js';import {e as e$3,d as d$5}from'./chunk-QYEQVNBF.js';import {a as a$A}from'./chunk-NGZF4YJS.js';import {a as a$F}from'./chunk-COICGD62.js';import {c as c$b,a as a$B}from'./chunk-5EEXLM45.js';import {a as a$J,b as b$m}from'./chunk-N4B2M44I.js';import {a as a$I}from'./chunk-NS53IPAC.js';import {f as f$4}from'./chunk-2CT5SN2L.js';import {a as a$j}from'./chunk-25V5XMWB.js';import {b as b$5,a as a$2,d as d$2}from'./chunk-OA2YJN22.js';import {f,e as e$2,a as a$5,d as d$8,i as i$3,g as g$9}from'./chunk-VHMDWRDG.js';import {a as a$c}from'./chunk-2OCJKLTW.js';import {a as a$9}from'./chunk-A5FBGRJA.js';import {a as a$z}from'./chunk-HCFOVANQ.js';import {l as l$2,e as e$a,c as c$c,a as a$O,b as b$p,m as m$8,k as k$5}from'./chunk-FU6SQ2ND.js';import {j,a as a$1,F,D as D$1,A,z,y,x,w as w$1,v as v$2,n as n$5,m as m$6,o as o$5,I,s as s$3,B,C as C$1,l as l$5,r as r$4,H,J,p as p$7,u as u$2,t as t$3,E as E$1}from'./chunk-CMLLERGG.js';import {b as b$c,a as a$g}from'./chunk-DFREJHG7.js';import {a as a$i}from'./chunk-NMXGSVMD.js';import {c as c$4,g as g$2,b as b$f,a as a$l,e as e$9,l as l$4}from'./chunk-M6DVNC6X.js';import {b as b$2,d as d$1,a as a$3,e as e$4,D,C,j as j$2,k as k$2,m as m$2,n as n$1,o as o$2,l,t as t$2,p as p$5,F as F$1,r as r$3,h as h$4,s as s$4,E,G,u as u$1,f as f$6,x as x$1,w as w$3,v as v$3,z as z$1}from'./chunk-OH6LV5JP.js';export{s as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-OH6LV5JP.js';import {m as m$3,j as j$5,l as l$1}from'./chunk-7NKM6EHE.js';import {a as a$h}from'./chunk-GR6442P7.js';import {g as g$1,a as a$b,e as e$6,b as b$q,h as h$5}from'./chunk-BLEIUQL6.js';import {b as b$r}from'./chunk-VN2MKTQO.js';import {a as a$4}from'./chunk-AFIFZTOY.js';import {a as a$P}from'./chunk-XWKGZRHN.js';import {b as b$e}from'./chunk-252EKOR6.js';import {c as c$h}from'./chunk-EWZZUQBR.js';import {o,b as b$3,p as p$3,q as q$2,r,m as m$7,i as i$4,j as j$8,e as e$f,g as g$a,c as c$i}from'./chunk-RGNCL5OB.js';import {h,e,g,c as c$2,b as b$8,a as a$8,f as f$3}from'./chunk-6B7L4NZE.js';import {a as a$f}from'./chunk-TQEMLBAG.js';import {c as c$j}from'./chunk-2FIX2MDC.js';import {a as a$E}from'./chunk-64XWHDZ3.js';import {c as c$7}from'./chunk-25AWHAB5.js';import {a as a$D}from'./chunk-W37NOQVG.js';import {n,f as f$1,u,p as p$2,w,q as q$1,k as k$1,t as t$1,v as v$1,j as j$3,g as g$3,h as h$1,i as i$1,a as a$e,b as b$b,e as e$7,l as l$7,o as o$6}from'./chunk-VQZ5PI5J.js';import {v,t,p,q,s as s$2,r as r$2,o as o$4,n as n$4,m as m$5,k as k$4,j as j$7,i as i$2,h as h$3,l as l$3,g as g$7,e as e$b,f as f$5,c as c$f,a as a$H,w as w$2}from'./chunk-ODK4LCEL.js';import {a as a$y}from'./chunk-FB7SCXAZ.js';import {Command,Option}from'commander';import s from'chalk';import b from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import mf from'vm';import*as M from'fs-extra';import M__default from'fs-extra';import $,{existsSync,promises,createWriteStream}from'fs';import ja,{tmpdir,homedir}from'os';import {execa}from'execa';import Ot,{createHash,randomUUID,createVerify,createHmac}from'crypto';import Ed from'http';import Ad from'https';function Pu(){return j$8()}function bu(t,e){return t==="py"?["-3",...e]:e}function ju(t){return typeof t=="object"&&t!==null}async function Cu(t,e,r,o=c$j()){try{let n=await execa(t,e,{cwd:r,timeout:o,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function Su(t,e){let r=["-m","rapidkit",...t],o=Pu();for(let n of o){let a=await Cu(n,bu(n,r),e?.cwd,e?.timeoutMs);if(!a.ok)continue;let i=(a.stdout??"").trim();try{let c=JSON.parse(i);return ju(c)?{ok:true,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr,data:c}:{ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}catch{return {ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}}return {ok:false}}async function El(t,e){let r=await Su(["project","detect","--path",t,"--json"],e);return !r.ok||!r.data||r.data.schema_version!==1?{ok:false,command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}:r}var Al=new Set(["create"]),ya=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),Eu=new Set(["pip","poetry","venv","pipx","python","uv"]);function Rl(t){return typeof t=="string"&&Eu.has(t)}function ka(t,e){return !t||Al.has(t)?false:a$5.has(t)?true:e?.has(t)??false}function va(t,e=null){let r=t[0];return !r||r.startsWith("-")||Al.has(r)||r==="init"?false:ka(r,e)?true:t.filter(n=>!n.startsWith("-")&&!ya.has(n)).length<=1?false:t.length>1}var gr=b.join(ja.homedir(),".workspairc.json"),Au=b.join(ja.homedir(),".rapidkitrc.json"),Ru=b.join(ja.homedir(),".rapidkit","config.json");function Pa(t){try{if(!$.existsSync(t))return {};let e=$.readFileSync(t,"utf-8"),r=JSON.parse(e);return !r||typeof r!="object"||Array.isArray(r)?{}:r}catch{return {}}}function xl(t){if(process.platform!=="win32")try{$.chmodSync(t,384);}catch{}}function fr(){let t=Pa(gr),e=Pa(Au),r=Pa(Ru);return $.existsSync(gr)&&xl(gr),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??r.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??r.aiEnabled,telemetry:t.telemetry??e.telemetry??r.telemetry}}function Yo(t){let r={...fr(),...t};$.writeFileSync(gr,JSON.stringify(r,null,2),{encoding:"utf-8",mode:384}),xl(gr);}function Yr(){return process.env.OPENAI_API_KEY||fr().openaiApiKey||null}function Ca(){return fr().aiEnabled!==false}function Sa(){return gr}function Il(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async r=>{let o=r.key;o?o.startsWith("sk-")||(console.log(s.red(`
 \u274C Invalid API key format (should start with sk-)
-`)),process.exit(1)):o=(await b([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Uo({openaiApiKey:o}),console.log(s.green(`
+`)),process.exit(1)):o=(await b$1([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Yo({openaiApiKey:o}),console.log(s.green(`
 \u2705 OpenAI API key saved successfully!
-`)),console.log(s.gray(`Stored in: ${ya()}`)),console.log(s.cyan(`
+`)),console.log(s.gray(`Stored in: ${Sa()}`)),console.log(s.cyan(`
 \u{1F389} You can now use AI features:`)),console.log(s.white('   workspai ai recommend "I need user authentication"')),console.log(s.gray(`
 \u{1F4A1} To generate module embeddings (one-time):`)),console.log(s.white("   cd packages/cli")),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
-`));}),e.command("show").description("Show current configuration").action(()=>{let r=pr();if(console.log(s.bold(`
+`));}),e.command("show").description("Show current configuration").action(()=>{let r=fr();if(console.log(s.bold(`
 \u2699\uFE0F  Workspai Configuration
 `)),r.openaiApiKey){let o=r.openaiApiKey.substring(0,8)+"..."+r.openaiApiKey.slice(-4);console.log(s.cyan("OpenAI API Key:"),s.white(o));}else console.log(s.cyan("OpenAI API Key:"),s.red("Not set")),console.log(s.gray("   Set with: workspai config set-api-key"));console.log(s.cyan("AI Features:"),r.aiEnabled!==false?s.green("Enabled"):s.red("Disabled")),console.log(s.gray(`
-\u{1F4C1} Config file: ${ya()}
-`));}),e.command("remove-api-key").description("Remove stored OpenAI API key").option("--yes","Remove without an interactive confirmation prompt").action(async r=>{if(!pr().openaiApiKey){console.log(s.yellow(`
+\u{1F4C1} Config file: ${Sa()}
+`));}),e.command("remove-api-key").description("Remove stored OpenAI API key").option("--yes","Remove without an interactive confirmation prompt").action(async r=>{if(!fr().openaiApiKey){console.log(s.yellow(`
 \u26A0\uFE0F  No API key is currently stored
-`));return}let n=r.yes===true||process.argv.includes("--yes");!n&&(!process.stdin.isTTY||!process.stdout.isTTY)&&(console.error(s.red("Cannot confirm API key removal in a non-interactive session. Use --yes.")),process.exit(1)),(n?{confirm:true}:await b([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(Uo({openaiApiKey:void 0}),console.log(s.green(`
+`));return}let n=r.yes===true||process.argv.includes("--yes");!n&&(!process.stdin.isTTY||!process.stdout.isTTY)&&(console.error(s.red("Cannot confirm API key removal in a non-interactive session. Use --yes.")),process.exit(1)),(n?{confirm:true}:await b$1([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(Yo({openaiApiKey:void 0}),console.log(s.green(`
 \u2705 API key removed successfully
 `))):console.log(s.gray(`
 Cancelled
 `));}),e.command("ai <action>").description("Enable or disable AI features (enable|disable)").action(r=>{r!=="enable"&&r!=="disable"&&(console.log(s.red(`
 \u274C Invalid action: ${r}`)),console.log(s.gray(`Use: workspai config ai enable|disable
-`)),process.exit(1));let o=r==="enable";Uo({aiEnabled:o}),console.log(s.green(`
+`)),process.exit(1));let o=r==="enable";Yo({aiEnabled:o}),console.log(s.green(`
 \u2705 AI features ${o?"enabled":"disabled"}
-`));});}var qr=null,Bo=false,ka=null;async function wu(){return ka||(ka=(await import('openai')).default),ka}function bl(){Bo=true;}function Cl(t){let r=new Array(1536),o=0;for(let a=0;a<t.length;a++)o=(o<<5)-o+t.charCodeAt(a),o=o&o;for(let a=0;a<1536;a++)o=o*1664525+1013904223&4294967295,r[a]=o/4294967295*2-1;let n=Math.sqrt(r.reduce((a,i)=>a+i*i,0));return r.map(a=>a/n)}async function qo(t){if(!t.trim()){qr=null;return}let e=await wu();qr=new e({apiKey:t});}function Sl(){if(!qr)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return qr}async function va(t){return Bo?Cl(t):(await Sl().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data[0].embedding}async function El(t){return Bo?t.map(Cl):(await Sl().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data.map(o=>o.embedding)}function Al(){return qr!==null}function dr(){return Bo}function Pa(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function yu(t){return !t||typeof t!="object"?{}:t}var ba=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],xt=null,ja=0,ku=300*1e3;function vu(t){let e=yu(t),r=e.slug||e.name||e.id||e.module_id||"",o=Pa(e.keywords??e.tags);return {id:r,name:e.display_name||e.name||"",category:Pu(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:o.map(n=>n.toLowerCase()),framework:ju(e.framework),dependencies:Pa(e.dependencies),useCases:Pa(e.use_cases??e.useCases)}}function Pu(t){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[t.toLowerCase()]||"infrastructure"}function ju(t){if(!t)return "both";if(typeof t=="string"){if(t.toLowerCase().includes("fastapi"))return "fastapi";if(t.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function bu(){try{let t=await g$9(["modules","list","--json-schema","1"],{cwd:process.cwd()});if(t.exitCode!==0)throw new Error(t.stderr.trim()||"Python Core modules command failed");let e=t.stdout.trim(),r;try{r=JSON.parse(e);}catch{let n=e.indexOf("{"),a=e.indexOf("["),i=[n,a].filter(g=>g>=0);if(i.length===0)throw new Error("Python Core modules response did not contain JSON");let c=Math.min(...i),l=e[c]==="["?"]":"}",p=e.lastIndexOf(l);if(p<c)throw new Error("Python Core modules response contained incomplete JSON");r=JSON.parse(e.slice(c,p+1));}let o=[];if(Array.isArray(r))o=r;else if(r&&typeof r=="object"){let n=r;Array.isArray(n.modules)?o=n.modules:Array.isArray(n.data)&&(o=n.data);}return o.map(vu).filter(n=>n.id&&n.name)}catch(t){return console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",t.message),console.warn("   Using fallback module catalog (11 modules)"),ba}}async function zo(){let t=Date.now();return dr()?(xt=ba,ja=t,xt):(xt&&t-ja<ku||(xt=await bu(),ja=t,xt.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),xt=ba)),xt)}var Su=fileURLToPath(import.meta.url),xl=P.dirname(Su),ur=null,_l=new Map;function Eu(t){return [t.name,t.description,t.longDescription,...t.keywords,...t.useCases].filter(Boolean).join(" ")}async function Au(t){let e=_l.get(t.id);if(e)return e;let r=await va(Eu(t));return _l.set(t.id,r),r}function Ru(){if(ur)return ur;let t=[P.join(xl,"../../data/modules-embeddings.json"),P.join(xl,"../data/modules-embeddings.json"),P.join(process.cwd(),"data/modules-embeddings.json")],e=null;for(let n of t)if(O.existsSync(n)){e=n;break}if(!e)throw new Error("embeddings file not found");let r=O.readFileSync(e,"utf-8"),o=JSON.parse(r);if(Array.isArray(o)?ur={model:"mock-or-text-embedding-3-small",dimension:o[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:o}:ur=o,!ur)throw new Error("failed to load embeddings data");return ur}function Il(t,e){if(t.length!==e.length)throw new Error("Vectors must have the same length");let r=0,o=0,n=0;for(let i=0;i<t.length;i++)r+=t[i]*e[i],o+=t[i]*t[i],n+=e[i]*e[i];let a=Math.sqrt(o)*Math.sqrt(n);return a===0?0:r/a}function Ol(t,e){let r=e.toLowerCase(),o=t.keywords.filter(n=>r.includes(n)||n.includes(r));return o.length>0?`Matches: ${o.slice(0,3).join(", ")}`:`Relevant for: ${t.useCases[0]}`}async function Nl(t,e=5){let r=await zo(),o=await va(t);if(dr()){let i=await Promise.all(r.map(async c=>{let l=await Au(c);return {module:c,score:Il(o,l),reason:Ol(c,t)}}));return i.sort((c,l)=>l.score-c.score),i.slice(0,e)}let a=Ru().modules.map(i=>{let c=r.find(p=>p.id===i.id);if(!c)return null;let l=Il(o,i.embedding);return {module:c,score:l,reason:Ol(c,t)}}).filter(i=>i!==null);return a.sort((i,c)=>c.score-i.score),a.slice(0,e)}var _u=fileURLToPath(import.meta.url),$l=P.dirname(_u);function Tl(t){return t instanceof Error?t.message:String(t)}function Iu(){return [P.join($l,"../../data/modules-embeddings.json"),P.join($l,"../data/modules-embeddings.json"),P.join(process.cwd(),"data/modules-embeddings.json")]}function Ml(){let t=Iu();for(let e of t)if(O.existsSync(e))try{let r=JSON.parse(O.readFileSync(e,"utf-8")),o=Array.isArray(r)?r:r.modules||[];return {exists:true,path:e,moduleCount:o.length,generatedAt:r.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function Xo(t=true,e){try{if(!Al()&&!dr())return console.log(s.red(`
+`));});}var Xr=null,Xo=false,Ea=null;async function xu(){return Ea||(Ea=(await import('openai')).default),Ea}function _l(){Xo=true;}function Ol(t){let r=new Array(1536),o=0;for(let a=0;a<t.length;a++)o=(o<<5)-o+t.charCodeAt(a),o=o&o;for(let a=0;a<1536;a++)o=o*1664525+1013904223&4294967295,r[a]=o/4294967295*2-1;let n=Math.sqrt(r.reduce((a,i)=>a+i*i,0));return r.map(a=>a/n)}async function Qo(t){if(!t.trim()){Xr=null;return}let e=await xu();Xr=new e({apiKey:t});}function Nl(){if(!Xr)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return Xr}async function Aa(t){return Xo?Ol(t):(await Nl().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data[0].embedding}async function $l(t){return Xo?t.map(Ol):(await Nl().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data.map(o=>o.embedding)}function Tl(){return Xr!==null}function hr(){return Xo}function Ra(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function Iu(t){return !t||typeof t!="object"?{}:t}var Ia=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],It=null,xa=0,_u=300*1e3;function Ou(t){let e=Iu(t),r=e.slug||e.name||e.id||e.module_id||"",o=Ra(e.keywords??e.tags);return {id:r,name:e.display_name||e.name||"",category:Nu(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:o.map(n=>n.toLowerCase()),framework:$u(e.framework),dependencies:Ra(e.dependencies),useCases:Ra(e.use_cases??e.useCases)}}function Nu(t){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[t.toLowerCase()]||"infrastructure"}function $u(t){if(!t)return "both";if(typeof t=="string"){if(t.toLowerCase().includes("fastapi"))return "fastapi";if(t.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function Tu(){try{let t=await g$9(["modules","list","--json-schema","1"],{cwd:process.cwd()});if(t.exitCode!==0)throw new Error(t.stderr.trim()||"Python Core modules command failed");let e=t.stdout.trim(),r;try{r=JSON.parse(e);}catch{let n=e.indexOf("{"),a=e.indexOf("["),i=[n,a].filter(f=>f>=0);if(i.length===0)throw new Error("Python Core modules response did not contain JSON");let c=Math.min(...i),l=e[c]==="["?"]":"}",p=e.lastIndexOf(l);if(p<c)throw new Error("Python Core modules response contained incomplete JSON");r=JSON.parse(e.slice(c,p+1));}let o=[];if(Array.isArray(r))o=r;else if(r&&typeof r=="object"){let n=r;Array.isArray(n.modules)?o=n.modules:Array.isArray(n.data)&&(o=n.data);}return o.map(Ou).filter(n=>n.id&&n.name)}catch(t){return console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",t.message),console.warn("   Using fallback module catalog (11 modules)"),Ia}}async function Zo(){let t=Date.now();return hr()?(It=Ia,xa=t,It):(It&&t-xa<_u||(It=await Tu(),xa=t,It.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),It=Ia)),It)}var Wu=fileURLToPath(import.meta.url),Wl=b.dirname(Wu),wr=null,Dl=new Map;function Du(t){return [t.name,t.description,t.longDescription,...t.keywords,...t.useCases].filter(Boolean).join(" ")}async function Lu(t){let e=Dl.get(t.id);if(e)return e;let r=await Aa(Du(t));return Dl.set(t.id,r),r}function Fu(){if(wr)return wr;let t=[b.join(Wl,"../../data/modules-embeddings.json"),b.join(Wl,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")],e=null;for(let n of t)if($.existsSync(n)){e=n;break}if(!e)throw new Error("embeddings file not found");let r=$.readFileSync(e,"utf-8"),o=JSON.parse(r);if(Array.isArray(o)?wr={model:"mock-or-text-embedding-3-small",dimension:o[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:o}:wr=o,!wr)throw new Error("failed to load embeddings data");return wr}function Ll(t,e){if(t.length!==e.length)throw new Error("Vectors must have the same length");let r=0,o=0,n=0;for(let i=0;i<t.length;i++)r+=t[i]*e[i],o+=t[i]*t[i],n+=e[i]*e[i];let a=Math.sqrt(o)*Math.sqrt(n);return a===0?0:r/a}function Fl(t,e){let r=e.toLowerCase(),o=t.keywords.filter(n=>r.includes(n)||n.includes(r));return o.length>0?`Matches: ${o.slice(0,3).join(", ")}`:`Relevant for: ${t.useCases[0]}`}async function Gl(t,e=5){let r=await Zo(),o=await Aa(t);if(hr()){let i=await Promise.all(r.map(async c=>{let l=await Lu(c);return {module:c,score:Ll(o,l),reason:Fl(c,t)}}));return i.sort((c,l)=>l.score-c.score),i.slice(0,e)}let a=Fu().modules.map(i=>{let c=r.find(p=>p.id===i.id);if(!c)return null;let l=Ll(o,i.embedding);return {module:c,score:l,reason:Fl(c,t)}}).filter(i=>i!==null);return a.sort((i,c)=>c.score-i.score),a.slice(0,e)}var Vu=fileURLToPath(import.meta.url),Vl=b.dirname(Vu);function Jl(t){return t instanceof Error?t.message:String(t)}function Ju(){return [b.join(Vl,"../../data/modules-embeddings.json"),b.join(Vl,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")]}function Kl(){let t=Ju();for(let e of t)if($.existsSync(e))try{let r=JSON.parse($.readFileSync(e,"utf-8")),o=Array.isArray(r)?r:r.modules||[];return {exists:true,path:e,moduleCount:o.length,generatedAt:r.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function tn(t=true,e){try{if(!Tl()&&!hr())return console.log(s.red(`
 \u274C OpenAI not initialized`)),console.log(s.yellow("Please set your API key:")),console.log(s.white("  workspai config set-api-key")),console.log(s.gray(`  OR set: export OPENAI_API_KEY="sk-..."
 `)),false;console.log(s.blue(`
 \u{1F916} Generating AI embeddings for Workspai modules...
-`)),console.log(s.gray("\u{1F4E1} Fetching modules from Workspai..."));let r=await zo();console.log(s.green(`\u2713 Found ${r.length} modules
+`)),console.log(s.gray("\u{1F4E1} Fetching modules from Workspai..."));let r=await Zo();console.log(s.green(`\u2713 Found ${r.length} modules
 `));let o=r.length*50/1e6*.02;if(console.log(s.cyan(`\u{1F4B0} Estimated cost: ~$${o.toFixed(3)}`)),console.log(s.gray(`   (Based on ${r.length} modules at $0.02/1M tokens)
-`)),t){let{confirm:i}=await b([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!i)return console.log(s.yellow(`
+`)),t){let{confirm:i}=await b$1([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!i)return console.log(s.yellow(`
 \u26A0\uFE0F  Embeddings generation cancelled
-`)),false}let n=r.map(i=>`${i.name}. ${i.description}. ${i.longDescription}. Keywords: ${i.keywords.join(", ")}. Use cases: ${i.useCases.join(", ")}.`),a=a$8(`Generating embeddings for ${r.length} modules...`,{component:"ai",phase:"embeddings.generate"});try{let i=await El(n);a.succeed(`Generated embeddings for ${r.length} modules`);let c={model:"text-embedding-3-small",dimension:i[0].length,generated_at:new Date().toISOString(),modules:r.map((g,u)=>({id:g.id,name:g.name,embedding:i[u]}))},l=e||P.join(process.cwd(),"data","modules-embeddings.json"),p=P.dirname(l);return O.existsSync(p)||O.mkdirSync(p,{recursive:true}),O.writeFileSync(l,JSON.stringify(c,null,2)),console.log(s.green(`
+`)),false}let n=r.map(i=>`${i.name}. ${i.description}. ${i.longDescription}. Keywords: ${i.keywords.join(", ")}. Use cases: ${i.useCases.join(", ")}.`),a=a$8(`Generating embeddings for ${r.length} modules...`,{component:"ai",phase:"embeddings.generate"});try{let i=await $l(n);a.succeed(`Generated embeddings for ${r.length} modules`);let c={model:"text-embedding-3-small",dimension:i[0].length,generated_at:new Date().toISOString(),modules:r.map((f,u)=>({id:f.id,name:f.name,embedding:i[u]}))},l=e||b.join(process.cwd(),"data","modules-embeddings.json"),p=b.dirname(l);return $.existsSync(p)||$.mkdirSync(p,{recursive:true}),$.writeFileSync(l,JSON.stringify(c,null,2)),console.log(s.green(`
 \u2705 Embeddings generated successfully!`)),console.log(s.gray(`\u{1F4C1} Saved to: ${l}`)),console.log(s.gray(`\u{1F4CA} Size: ${r.length} modules, ${i[0].length} dimensions
-`)),true}catch(i){a.fail("Failed to generate embeddings");let c=Tl(i);return c.includes("429")?(console.log(s.red(`
+`)),true}catch(i){a.fail("Failed to generate embeddings");let c=Jl(i);return c.includes("429")?(console.log(s.red(`
 \u274C OpenAI API quota exceeded`)),console.log(s.yellow(`Please check your billing: https://platform.openai.com/account/billing
 `))):c.includes("401")?(console.log(s.red(`
 \u274C Invalid API key`)),console.log(s.yellow("Please set a valid API key:")),console.log(s.white(`  workspai config set-api-key
 `))):console.log(s.red(`
 \u274C Error: ${c}
 `)),false}}catch(r){return console.log(s.red(`
-\u274C Failed to generate embeddings: ${Tl(r)}
-`)),false}}async function Wl(t=true){if(Ml().exists)return  true;if(console.log(s.yellow(`
+\u274C Failed to generate embeddings: ${Jl(r)}
+`)),false}}async function Hl(t=true){if(Kl().exists)return  true;if(console.log(s.yellow(`
 \u26A0\uFE0F  Module embeddings not found`)),console.log(s.gray(`AI recommendations require embeddings to be generated.
 `)),!t)return console.log(s.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(s.white(`Run: workspai ai generate-embeddings
-`)),false;let{action:r}=await b([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (OpenAI key for production, or mock mode for testing)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await Xo(true):(r==="manual"&&(console.log(s.cyan(`
+`)),false;let{action:r}=await b$1([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (OpenAI key for production, or mock mode for testing)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await tn(true):(r==="manual"&&(console.log(s.cyan(`
 \u{1F4DD} To generate embeddings manually:
 `)),console.log(s.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Set the API key:")),console.log(s.gray("   workspai config set-api-key")),console.log(s.gray(`   OR: export OPENAI_API_KEY="sk-..."
 `)),console.log(s.white("3. Generate embeddings:")),console.log(s.gray(`   workspai ai generate-embeddings
 `)),console.log(s.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
-`))),false)}async function Dl(){let t=Ml();return t.exists?(console.log(s.blue(`
+`))),false)}async function Bl(){let t=Kl();return t.exists?(console.log(s.blue(`
 \u{1F504} Updating embeddings...`)),console.log(s.gray(`Current: ${t.moduleCount} modules`)),console.log(s.gray(`Generated: ${t.generatedAt||"unknown"}
-`)),t.path?await Xo(true,t.path):false):(console.log(s.yellow(`
+`)),t.path?await tn(true,t.path):false):(console.log(s.yellow(`
 \u26A0\uFE0F  No existing embeddings found`)),console.log(s.gray(`Use: workspai ai generate-embeddings
-`)),false)}function Ca(t){if(t&&typeof t=="object"){let e=t;return {message:typeof e.message=="string"?e.message:String(t),code:typeof e.code=="string"?e.code:void 0}}return {message:String(t)}}function Ll(t,e=0){console.log(JSON.stringify(t,null,2)),e!==0&&process.exit(e);}function Fl(t){let e$1=t.command("ai").description("AI-powered features");e$1.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(r,o)=>{try{wa()||(o.json&&Ll({ok:false,error:{code:"AI_DISABLED",message:"AI features are disabled",remediation:"workspai config ai enable"}},1),console.log(s.yellow(`
+`)),false)}function _a(t){if(t&&typeof t=="object"){let e=t;return {message:typeof e.message=="string"?e.message:String(t),code:typeof e.code=="string"?e.code:void 0}}return {message:String(t)}}function Ul(t,e=0){console.log(JSON.stringify(t,null,2)),e!==0&&process.exit(e);}function ql(t){let e$1=t.command("ai").description("AI-powered features");e$1.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(r,o)=>{try{Ca()||(o.json&&Ul({ok:false,error:{code:"AI_DISABLED",message:"AI features are disabled",remediation:"workspai config ai enable"}},1),console.log(s.yellow(`
 \u26A0\uFE0F  AI features are disabled`)),console.log(s.gray(`Enable with: workspai config ai enable
-`)),process.exit(1));let n=Br();n?await qo(n):(o.json||(console.log(s.yellow(`
+`)),process.exit(1));let n=Yr();n?await Qo(n):(o.json||(console.log(s.yellow(`
 \u26A0\uFE0F  OpenAI API key not configured - using MOCK MODE for testing
 `)),console.log(s.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(s.gray(`   For production, configure your OpenAI API key:
 `)),console.log(s.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("   2. Configure it: workspai config set-api-key")),console.log(s.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
-`))),bl());let a=r;a||(a=(await b([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:f=>f.length===0?"Please enter a description":f.length<3?"Please be more specific (at least 3 characters)":true}])).query),o.json||console.log(s.blue(`
+`))),_l());let a=r;a||(a=(await b$1([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:g=>g.length===0?"Please enter a description":g.length<3?"Please be more specific (at least 3 characters)":true}])).query),o.json||console.log(s.blue(`
 \u{1F916} Analyzing your request...
-`)),!n||await Wl(!o.json)||(o.json&&Ll({ok:false,query:a,error:{code:"EMBEDDINGS_MISSING",message:"Module embeddings are not available",remediation:"workspai ai generate-embeddings"}},1),console.log(s.yellow(`
+`)),!n||await Hl(!o.json)||(o.json&&Ul({ok:false,query:a,error:{code:"EMBEDDINGS_MISSING",message:"Module embeddings are not available",remediation:"workspai ai generate-embeddings"}},1),console.log(s.yellow(`
 \u26A0\uFE0F  Cannot proceed without embeddings
-`)),process.exit(1));let c=parseInt(o.number,10),l=await Nl(a,c);if(l.length===0||l[0].score<.3)if(console.log(s.yellow(`
+`)),process.exit(1));let c=parseInt(o.number,10),l=await Gl(a,c);if(l.length===0||l[0].score<.3)if(console.log(s.yellow(`
 \u26A0\uFE0F  No matching modules found in RapidKit Core registry.
 `)),console.log(s.cyan(`\u{1F4A1} Options:
 `)),console.log(s.white("1. Create custom module:")),console.log(s.gray("   npx workspai modules scaffold <name> --category <category>")),console.log(s.gray(`   Example: npx workspai modules scaffold blockchain-integration --category integrations
@@ -68,23 +68,23 @@ Cancelled
 `)),console.log(s.white("3. Request feature:")),console.log(s.gray(`   https://github.com/chistiq/workspai/issues
 `)),l.length>0)console.log(s.yellow(`\u26A0\uFE0F  Low confidence matches found:
 `));else return;if(o.json){console.log(JSON.stringify({query:a,recommendations:l},null,2));return}console.log(s.green.bold(`\u{1F4E6} Recommended Modules:
-`)),l.forEach((u,f)=>{let b=(u.score*100).toFixed(1),k=u.score>.8?" \u2B50":"";console.log(s.bold(`${f+1}. ${u.module.name}${k}`)),console.log(s.gray(`   ${u.module.description}`)),console.log(s.cyan(`   Match: ${b}%`)+s.gray(` - ${u.reason}`)),console.log(s.yellow(`   Category: ${u.module.category}`)),u.module.dependencies.length>0&&console.log(s.magenta(`   Requires: ${u.module.dependencies.join(", ")}`)),console.log();});let p=l.slice(0,3).map(u=>u.module.id);console.log(s.cyan("\u{1F4A1} Quick install (top 3):")),console.log(s.white(`   npx workspai add module ${p.join(" ")}
-`));let{shouldInstall:g}=await b([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(g){let{selectedModules:u}=await b([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:l.map(b=>({name:`${b.module.name} - ${b.module.description}`,value:b.module.id,checked:b.score>.7}))}]),f$1=u;if(f$1.length>0){console.log(s.blue(`
-\u{1F4E6} Installing ${f$1.length} modules...
-`)),console.log(s.gray(`Command: npx workspai add module ${f$1.join(" ")}`));let k=D(process.cwd()).commandMap.add;if(!k||k.status!=="supported"){console.log(s.red(`
-\u274C RapidKit Core modules are not available for this project.`)),console.log(s.gray(`   ${k?.reason??"Module commands require RapidKit Core module-enabled project metadata."}
-`));return}let S=await f(["add","module",...f$1],{cwd:process.cwd()});console.log(S===0?s.green(`
+`)),l.forEach((u,g)=>{let j=(u.score*100).toFixed(1),y=u.score>.8?" \u2B50":"";console.log(s.bold(`${g+1}. ${u.module.name}${y}`)),console.log(s.gray(`   ${u.module.description}`)),console.log(s.cyan(`   Match: ${j}%`)+s.gray(` - ${u.reason}`)),console.log(s.yellow(`   Category: ${u.module.category}`)),u.module.dependencies.length>0&&console.log(s.magenta(`   Requires: ${u.module.dependencies.join(", ")}`)),console.log();});let p=l.slice(0,3).map(u=>u.module.id);console.log(s.cyan("\u{1F4A1} Quick install (top 3):")),console.log(s.white(`   npx workspai add module ${p.join(" ")}
+`));let{shouldInstall:f$1}=await b$1([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(f$1){let{selectedModules:u}=await b$1([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:l.map(j=>({name:`${j.module.name} - ${j.module.description}`,value:j.module.id,checked:j.score>.7}))}]),g=u;if(g.length>0){console.log(s.blue(`
+\u{1F4E6} Installing ${g.length} modules...
+`)),console.log(s.gray(`Command: npx workspai add module ${g.join(" ")}`));let y=D(process.cwd()).commandMap.add;if(!y||y.status!=="supported"){console.log(s.red(`
+\u274C RapidKit Core modules are not available for this project.`)),console.log(s.gray(`   ${y?.reason??"Module commands require RapidKit Core module-enabled project metadata."}
+`));return}let S=await f(["add","module",...g],{cwd:process.cwd()});console.log(S===0?s.green(`
 \u2705 Selected modules installed successfully
 `):s.red(`
 \u274C Module installation failed (exit code: ${S})
 `));}else console.log(s.gray(`
 No modules selected
-`));}}catch(n){let a=Ca(n);e.error(`
+`));}}catch(n){let a=_a(n);e.error(`
 \u274C Error:`,a.message),a.code==="invalid_api_key"?(console.log(s.yellow(`
 \u{1F4A1} Your API key may be invalid or expired`)),console.log(s.cyan(`   Update it: workspai config set-api-key
 `))):a.message.includes("embeddings file not found")&&(console.log(s.yellow(`
 \u{1F4A1} Module embeddings not generated yet`)),console.log(s.cyan("   Generate them (one-time):")),console.log(s.white("   cd packages/cli")),console.log(s.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
-`))),process.exit(1);}}),e$1.command("info").description("Show AI features information").action(()=>{let r=Br(),o=wa();console.log(s.bold(`
+`))),process.exit(1);}}),e$1.command("info").description("Show AI features information").action(()=>{let r=Yr(),o=Ca();console.log(s.bold(`
 \u{1F916} Workspai AI Features
 `)),console.log(s.cyan("Status:"),o?s.green("Enabled"):s.red("Disabled")),console.log(s.cyan("API Key:"),r?s.green("Configured \u2713"):s.red("Not configured \u2717")),console.log(s.bold(`
 \u{1F4E6} Available Features:
@@ -92,102 +92,102 @@ No modules selected
 \u{1F4B0} Cost:
 `)),console.log(s.white("\u2022 Provider and model pricing varies; review current pricing before use.")),console.log(s.gray("\u2022 Workspai does not add a per-query fee to local CLI requests.")),console.log(s.bold(`
 \u{1F680} Getting Started:
-`)),r?(console.log(s.green("\u2713 You're all set!")),console.log(s.white('  Try: workspai ai recommend "user authentication"'))):(console.log(s.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure: workspai config set-api-key")),console.log(s.white('3. Try: workspai ai recommend "user authentication"'))),console.log();}),e$1.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let r=Br();r||(console.log(s.red(`
+`)),r?(console.log(s.green("\u2713 You're all set!")),console.log(s.white('  Try: workspai ai recommend "user authentication"'))):(console.log(s.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure: workspai config set-api-key")),console.log(s.white('3. Try: workspai ai recommend "user authentication"'))),console.log();}),e$1.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let r=Yr();r||(console.log(s.red(`
 \u274C OpenAI API key not configured
 `)),console.log(s.cyan(`To generate embeddings, you need an OpenAI API key:
 `)),console.log(s.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure it: workspai config set-api-key")),console.log(s.gray(`
    OR set environment variable:`)),console.log(s.white(`   export OPENAI_API_KEY="sk-proj-..."
-`)),process.exit(1)),qo(r);let o=await Xo(true);o&&(console.log(s.green("\u2705 Ready to use AI recommendations!")),console.log(s.cyan(`Try: workspai ai recommend "authentication"
-`))),process.exit(o?0:1);}catch(r){let o=Ca(r);e.error("Failed to generate embeddings:",o.message),process.exit(1);}}),e$1.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let r=Br();r||(console.log(s.red(`
+`)),process.exit(1)),Qo(r);let o=await tn(true);o&&(console.log(s.green("\u2705 Ready to use AI recommendations!")),console.log(s.cyan(`Try: workspai ai recommend "authentication"
+`))),process.exit(o?0:1);}catch(r){let o=_a(r);e.error("Failed to generate embeddings:",o.message),process.exit(1);}}),e$1.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let r=Yr();r||(console.log(s.red(`
 \u274C OpenAI API key not configured
 `)),console.log(s.white(`Set your API key: workspai config set-api-key
-`)),process.exit(1)),qo(r);let o=await Dl();process.exit(o?0:1);}catch(r){let o=Ca(r);e.error("Failed to update embeddings:",o.message),process.exit(1);}});}var Nu="rapidkit.product-factory-plan.v1",$u="rapidkit.private-product-manifest.v1";function Gl(t){let e=process.argv;for(let r=0;r<e.length;r+=1){let o=e[r];if(o===t){let n=e[r+1];return n&&!n.startsWith("-")?n:void 0}if(o.startsWith(`${t}=`))return o.slice(t.length+1)}}function Yr(t,e=""){return typeof t=="string"&&t.trim()?t.trim():e}function Sa(t){return typeof t=="string"&&t.trim()?t.trim():null}function Tu(t,e){return typeof t=="number"&&Number.isFinite(t)?t:e}function Vl(t){return Array.isArray(t)?[...new Set(t.filter(e=>typeof e=="string").map(e=>e.trim()).filter(Boolean))]:[]}function Kl(t){if(!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(t))throw new Error(`Invalid product slug "${t}". Use lowercase letters, numbers, and hyphens.`)}function Mu(t,e,r){let o=Yr(t.slug);if(!o)throw new Error(`Backlog product at index ${e} is missing slug.`);Kl(o);let n=Vl(t.modules),a=Vl(t.moduleGaps);return {rank:Tu(t.rank,e+1),slug:o,title:Yr(t.title,o),category:Yr(t.category,"Uncategorized"),tier:Yr(t.tier,"pro"),summary:Yr(t.summary),modules:n,moduleGaps:a,recommendedKit:r,workspaceProfile:"enterprise",readiness:{status:a.length>0?"blocked-by-module-gaps":"ready-for-private-manifest",blockingGaps:a}}}function Wu(t){if(!t||typeof t!="object"||Array.isArray(t))throw new Error("Backlog must be a JSON object.");return t}async function Du(t){let e=P.resolve(process.cwd(),t),r=Wu(await M__default.readJson(e));if(!Array.isArray(r.products))throw new Error("Backlog must contain a products array.");return {absolutePath:e,payload:r}}function Lu(t,e){let r=[...t];if(e.tier){let o=e.tier.toLowerCase();r=r.filter(n=>n.tier.toLowerCase()===o);}if(e.category){let o=e.category.toLowerCase();r=r.filter(n=>n.category.toLowerCase()===o);}if(e.limit){let o=Number.parseInt(e.limit,10);if(!Number.isInteger(o)||o<1)throw new Error("--limit must be a positive integer.");r=r.slice(0,o);}return r}async function Hl(t){let e=t.kit?.trim()||"fastapi.standard",{absolutePath:r,payload:o}=await Du(t.backlogPath),n=o.products,a=n.map((g,u)=>Mu(g,u,e)),i=Lu(a,t),c=new Set(i.flatMap(g=>g.modules)),l=i.flatMap(g=>g.moduleGaps),p=i.filter(g=>g.readiness.status==="ready-for-private-manifest").length;return {schemaVersion:Nu,generatedAt:(t.now??new Date).toISOString(),source:{backlogPath:r,backlogSchemaVersion:Sa(o.schemaVersion),purpose:Sa(o.purpose),publicationRule:Sa(o.publicationRule)},defaults:{kit:e,workspaceProfile:"enterprise",projectSlug:"api"},stats:{totalProducts:n.length,plannedProducts:i.length,readyProducts:p,blockedProducts:i.length-p,uniqueModules:c.size,knownModuleGaps:l.length},products:i}}function gr(t){return JSON.stringify(t,null,2)}function Fu(t){return `sha256:${It.createHash("sha256").update(gr(t)).digest("hex")}`}function Gu(t){return t.replace(/\\/g,"/")}async function Vu(t){let e=await Hl({backlogPath:t.backlogPath,kit:t.kit,now:t.now}),r=e.products.find(a=>a.slug===t.slug);if(!r)throw new Error(`Product "${t.slug}" was not found in backlog.`);let o=t.outputRoot||"../workspai-examples-pro",n={schemaVersion:$u,generatedAt:e.generatedAt,product:{rank:r.rank,slug:r.slug,title:r.title,category:r.category,tier:r.tier,summary:r.summary},workspace:{name:r.slug,profile:"enterprise",outputHint:Gu(P.join(o,r.slug))},projects:[{slug:"api",kit:r.recommendedKit,runtime:"python",framework:"fastapi",modules:r.modules,moduleGaps:r.moduleGaps}],factory:{sourceBacklogPath:e.source.backlogPath,manifestChecksum:"",requiredCommands:[`npx workspai create workspace ${r.slug} --yes --profile enterprise`,`npx workspai create project ${r.recommendedKit} api --yes --skip-install`,"npx workspai init","npx workspai workspace run test --strict --json","npx workspai readiness --strict --json"],releaseEvidencePath:`.workspai/product-factory/${r.slug}/release-evidence.json`}};return {...n,factory:{...n.factory,manifestChecksum:Fu({...n,factory:{...n.factory,manifestChecksum:""}})}}}async function Jl(t,e,r=false){let o=P.resolve(process.cwd(),t);if(!r&&await M__default.pathExists(o))throw new Error(`Refusing to overwrite existing file: ${o}. Use --force.`);await M__default.ensureDir(P.dirname(o)),await M__default.writeFile(o,`${gr(e)}
-`,"utf-8");}function Ju(t,e){let r=P.join(".workspai","product-factory","manifests",`${e}.manifest.json`);return t?t.endsWith(".json")?t:P.join(t,`${e}.manifest.json`):r}function Ku(t,e){console.log(s.bold(`
+`)),process.exit(1)),Qo(r);let o=await Bl();process.exit(o?0:1);}catch(r){let o=_a(r);e.error("Failed to update embeddings:",o.message),process.exit(1);}});}var Hu="rapidkit.product-factory-plan.v1",Bu="rapidkit.private-product-manifest.v1";function zl(t){let e=process.argv;for(let r=0;r<e.length;r+=1){let o=e[r];if(o===t){let n=e[r+1];return n&&!n.startsWith("-")?n:void 0}if(o.startsWith(`${t}=`))return o.slice(t.length+1)}}function Zr(t,e=""){return typeof t=="string"&&t.trim()?t.trim():e}function Oa(t){return typeof t=="string"&&t.trim()?t.trim():null}function Uu(t,e){return typeof t=="number"&&Number.isFinite(t)?t:e}function Yl(t){return Array.isArray(t)?[...new Set(t.filter(e=>typeof e=="string").map(e=>e.trim()).filter(Boolean))]:[]}function Ql(t){if(!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(t))throw new Error(`Invalid product slug "${t}". Use lowercase letters, numbers, and hyphens.`)}function qu(t,e,r){let o=Zr(t.slug);if(!o)throw new Error(`Backlog product at index ${e} is missing slug.`);Ql(o);let n=Yl(t.modules),a=Yl(t.moduleGaps);return {rank:Uu(t.rank,e+1),slug:o,title:Zr(t.title,o),category:Zr(t.category,"Uncategorized"),tier:Zr(t.tier,"pro"),summary:Zr(t.summary),modules:n,moduleGaps:a,recommendedKit:r,workspaceProfile:"enterprise",readiness:{status:a.length>0?"blocked-by-module-gaps":"ready-for-private-manifest",blockingGaps:a}}}function zu(t){if(!t||typeof t!="object"||Array.isArray(t))throw new Error("Backlog must be a JSON object.");return t}async function Yu(t){let e=b.resolve(process.cwd(),t),r=zu(await M__default.readJson(e));if(!Array.isArray(r.products))throw new Error("Backlog must contain a products array.");return {absolutePath:e,payload:r}}function Xu(t,e){let r=[...t];if(e.tier){let o=e.tier.toLowerCase();r=r.filter(n=>n.tier.toLowerCase()===o);}if(e.category){let o=e.category.toLowerCase();r=r.filter(n=>n.category.toLowerCase()===o);}if(e.limit){let o=Number.parseInt(e.limit,10);if(!Number.isInteger(o)||o<1)throw new Error("--limit must be a positive integer.");r=r.slice(0,o);}return r}async function Zl(t){let e=t.kit?.trim()||"fastapi.standard",{absolutePath:r,payload:o}=await Yu(t.backlogPath),n=o.products,a=n.map((f,u)=>qu(f,u,e)),i=Xu(a,t),c=new Set(i.flatMap(f=>f.modules)),l=i.flatMap(f=>f.moduleGaps),p=i.filter(f=>f.readiness.status==="ready-for-private-manifest").length;return {schemaVersion:Hu,generatedAt:(t.now??new Date).toISOString(),source:{backlogPath:r,backlogSchemaVersion:Oa(o.schemaVersion),purpose:Oa(o.purpose),publicationRule:Oa(o.publicationRule)},defaults:{kit:e,workspaceProfile:"enterprise",projectSlug:"api"},stats:{totalProducts:n.length,plannedProducts:i.length,readyProducts:p,blockedProducts:i.length-p,uniqueModules:c.size,knownModuleGaps:l.length},products:i}}function kr(t){return JSON.stringify(t,null,2)}function Qu(t){return `sha256:${Ot.createHash("sha256").update(kr(t)).digest("hex")}`}function Zu(t){return t.replace(/\\/g,"/")}async function em(t){let e=await Zl({backlogPath:t.backlogPath,kit:t.kit,now:t.now}),r=e.products.find(a=>a.slug===t.slug);if(!r)throw new Error(`Product "${t.slug}" was not found in backlog.`);let o=t.outputRoot||"../workspai-examples-pro",n={schemaVersion:Bu,generatedAt:e.generatedAt,product:{rank:r.rank,slug:r.slug,title:r.title,category:r.category,tier:r.tier,summary:r.summary},workspace:{name:r.slug,profile:"enterprise",outputHint:Zu(b.join(o,r.slug))},projects:[{slug:"api",kit:r.recommendedKit,runtime:"python",framework:"fastapi",modules:r.modules,moduleGaps:r.moduleGaps}],factory:{sourceBacklogPath:e.source.backlogPath,manifestChecksum:"",requiredCommands:[`npx workspai create workspace ${r.slug} --yes --profile enterprise`,`npx workspai create project ${r.recommendedKit} api --yes --skip-install`,"npx workspai init","npx workspai workspace run test --strict --json","npx workspai readiness --strict --json"],releaseEvidencePath:`.workspai/product-factory/${r.slug}/release-evidence.json`}};return {...n,factory:{...n.factory,manifestChecksum:Qu({...n,factory:{...n.factory,manifestChecksum:""}})}}}async function Xl(t,e,r=false){let o=b.resolve(process.cwd(),t);if(!r&&await M__default.pathExists(o))throw new Error(`Refusing to overwrite existing file: ${o}. Use --force.`);await M__default.ensureDir(b.dirname(o)),await M__default.writeFile(o,`${kr(e)}
+`,"utf-8");}function tm(t,e){let r=b.join(".workspai","product-factory","manifests",`${e}.manifest.json`);return t?t.endsWith(".json")?t:b.join(t,`${e}.manifest.json`):r}function rm(t,e){console.log(s.bold(`
 Workspai Product Factory Plan
 `)),console.log(s.cyan("Products:"),s.white(String(t.stats.plannedProducts))),console.log(s.cyan("Ready:"),s.green(String(t.stats.readyProducts))),console.log(s.cyan("Blocked:"),s.yellow(String(t.stats.blockedProducts))),console.log(s.cyan("Unique modules:"),s.white(String(t.stats.uniqueModules))),console.log(s.cyan("Known gaps:"),s.yellow(String(t.stats.knownModuleGaps))),e&&console.log(s.gray(`
-Wrote plan: ${P.resolve(process.cwd(),e)}`)),console.log(s.gray(`
+Wrote plan: ${b.resolve(process.cwd(),e)}`)),console.log(s.gray(`
 Next: npx workspai product manifest create <slug> --from-backlog <file>
-`));}function Hu(t,e){console.log(s.bold(`
+`));}function om(t,e){console.log(s.bold(`
 Workspai Private Product Manifest
 `)),console.log(s.cyan("Product:"),s.white(t.product.slug)),console.log(s.cyan("Kit:"),s.white(t.projects[0].kit)),console.log(s.cyan("Modules:"),s.white(String(t.projects[0].modules.length))),console.log(s.cyan("Module gaps:"),s.yellow(String(t.projects[0].moduleGaps.length))),console.log(s.cyan("Checksum:"),s.white(t.factory.manifestChecksum)),console.log(s.gray(`
-Wrote manifest: ${P.resolve(process.cwd(),e)}
-`));}function Ul(t){let e=t.command("product",{hidden:true}).description("Product Factory commands for private workspace product manifests");e.command("plan <backlog>").description("Build a deterministic Product Factory plan from a workspace backlog JSON").option("--output <file>","Write plan JSON to file").option("--kit <kit>","Default API kit for generated product manifests","fastapi.standard").option("--tier <tier>","Filter products by tier").option("--category <category>","Filter products by category").option("--limit <count>","Limit planned products").option("--json","Print JSON to stdout").action(async(r,o)=>{try{let n=o.output||Gl("--output"),a=await Hl({backlogPath:r,kit:o.kit,tier:o.tier,category:o.category,limit:o.limit});a$4(a,"contracts/product-factory-plan.v1.json","Product Factory plan"),n&&await Jl(n,a,true),o.json?console.log(gr(a)):Ku(a,n);}catch(n){let a=n instanceof Error?n.message:String(n);o.json?console.log(gr({ok:false,error:{message:a}})):console.error(s.red(`Product plan failed: ${a}`)),process.exit(1);}}),e.command("manifest").description("Create or inspect private product manifests").command("create <slug>").description("Create a private product manifest from a backlog product slug").requiredOption("--from-backlog <file>","Source workspace backlog JSON").option("--output <fileOrDir>","Manifest output file or directory").option("--kit <kit>","API kit for the generated workspace product","fastapi.standard").option("--workspace-output <dir>","Suggested root for generated product workspaces").option("--json","Print JSON to stdout").option("--force","Overwrite existing manifest file").action(async(r,o)=>{try{let n=o.output||Gl("--output");Kl(r);let a=await Vu({backlogPath:o.fromBacklog,slug:r,kit:o.kit,outputRoot:o.workspaceOutput});a$4(a,"contracts/private-product-manifest.v1.json","Private product manifest");let i=Ju(n,r);await Jl(i,a,o.force===true),o.json?console.log(gr(a)):Hu(a,i);}catch(n){let a=n instanceof Error?n.message:String(n);o.json?console.log(gr({ok:false,error:{message:a}})):console.error(s.red(`Product manifest create failed: ${a}`)),process.exit(1);}});}var ql="rapidkit-workspace-snapshot-v1",Qr="rapidkit-workspace-snapshot-v2",Uu=ql,zl="rapidkit-project-archive-v1",vt="workspai-archive.json",Zo="rapidkit-archive.json",Bu=[".workspai/workspace.json",t.workspaceContract,t.workspaceRegistry,".workspai/imported-projects.json",".workspai/policies.yml",".workspai/toolchain.lock",".workspai/cache-config.yml",".workspai-workspace","workspai.config.json","workspai.config.js","workspai.config.cjs","workspai.config.mjs",".rapidkit/workspace.json",".rapidkit-workspace","rapidkit.config.json","rapidkit.config.js","rapidkit.config.cjs","rapidkit.config.mjs","package.json"],qu=new Set([".git","node_modules",".venv","dist","build","target","coverage","htmlcov",".next"]),Xr={requireReasonForDestructiveOps:false,requireSafetySnapshotForDestructiveOps:true,allowPermanentDelete:true};function hr(t=new Date){return t.toISOString().replace(/[:.]/g,"-")}function en(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");if(!e)throw new Error("Snapshot name must contain at least one letter or number.");return e.slice(0,120)}async function Yl(t){try{let e=await M__default.readJson(t);return e&&typeof e=="object"&&!Array.isArray(e)?e:null}catch{return null}}function zu(t,e){if(!t)return e;let r=t.trim().toLowerCase();return ["true","yes","1","on"].includes(r)?true:["false","no","0","off"].includes(r)?false:e}async function Yu(t){let e=t$1(t,"policies.yml").find(r=>existsSync(r))??q$1(t,"policies.yml");if(!await M__default.pathExists(e))return {...Xr};try{let r=await M__default.readFile(e,"utf-8"),o=(n,a)=>{let i=r.match(new RegExp(`^\\s*${n}:\\s*([^#\\n]+)`,"m"));return zu(i?.[1],a)};return {requireReasonForDestructiveOps:o("require_reason_for_destructive_ops",Xr.requireReasonForDestructiveOps),requireSafetySnapshotForDestructiveOps:o("require_safety_snapshot_for_destructive_ops",Xr.requireSafetySnapshotForDestructiveOps),allowPermanentDelete:o("allow_permanent_delete",Xr.allowPermanentDelete)}}catch{return {...Xr}}}function Xu(t){return q$1(t,"audit","events.jsonl")}async function ct(t,e){let r={schema:"rapidkit-workspace-audit-event-v1",id:It.randomUUID(),timestamp:new Date().toISOString(),workspacePath:t,...e},o=Xu(t);return await M__default.ensureDir(P.dirname(o)),await M__default.appendFile(o,`${JSON.stringify(r)}
-`,"utf-8"),r}async function tn(t,e,r){let o=await Yu(t);if(o.requireReasonForDestructiveOps&&!r.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(o.requireSafetySnapshotForDestructiveOps&&r.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(r.permanent&&!o.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return o}function Aa(t=process.cwd()){let e=P.resolve(t),r=P.resolve(ha.tmpdir());for(;;){if(e!==r&&k$1(e))return e;let o=P.dirname(e);if(o===e)return null;e=o;}}function Ot(t){let e=t?P.resolve(t):Aa(process.cwd())??b$4({startPath:process.cwd()})?.workspacePath??null;if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!k$1(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function Xl(t){let e=await Yl(t$1(t,"workspace.json").find(o=>existsSync(o))??q$1(t,"workspace.json")),r=e?.workspace_name??e?.name;return typeof r=="string"&&r.trim()?r.trim():b$b(t)}function wr(t){return q$1(t,"snapshots")}function Zr(t){return q$1(t,"archive","projects")}function fr(t){return P.join(t,"files")}function Qu(t){return P.join(ha.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${It.randomBytes(4).toString("hex")}`)}function Zu(t,e){return P.join(wr(t),`.tmp-${process.pid}-${e}-${It.randomBytes(4).toString("hex")}`)}function rn(t,e){let r=P.relative(t,e);if(!r)return  true;let o=r.split(P.sep);return (o[0]===".workspai"||o[0]===".rapidkit")&&["snapshots","archive","audit"].includes(o[1]||"")?false:!o.some(n=>qu.has(n)||a$g(n))}async function em(t){let e=await a$h(t,{descendIntoMatchedProjects:false}),r=new Map;for(let n of e){let a=P.relative(t,n).replace(/\\/g,"/");r.set(a,{name:P.basename(n),relativePath:a});}let o=await Yl(t$1(t,"workspace.contract.json").find(n=>existsSync(n))??q$1(t,"workspace.contract.json"));if(Array.isArray(o?.projects))for(let n of o.projects){if(!n||typeof n!="object")continue;let a=n,i=typeof a.relativePath=="string"?a.relativePath.replace(/\\/g,"/"):"",c=typeof a.slug=="string"?a.slug.trim():"";!i||!c||i.startsWith("../")||P.isAbsolute(i)||r.set(i,{name:c,relativePath:i});}return [...r.values()].sort((n,a)=>n.relativePath.localeCompare(a.relativePath))}async function tm(t,e){let r=[],o=new Set;for(let n of Bu){let a=P.join(t,n);if(!await M__default.pathExists(a))continue;let i=w(n);if(o.has(i))continue;let c=P.join(e,i);await M__default.copy(a,c,{filter:l=>rn(t,l)}),r.push(i),o.add(i);}return r}async function Ql(t){let e=[];async function r(o){let n=[];try{n=await M__default.readdir(o,{withFileTypes:true});}catch{return}for(let a of n){let i=P.join(o,a.name);a.isDirectory()?a.name===".rapidkit"?e.push(i):await r(i):a.isFile()&&a.name===".rapidkit-workspace"&&e.push(i);}}await r(t),e.sort((o,n)=>n.length-o.length);for(let o of e){let n=P.join(P.dirname(o),P.basename(w(P.basename(o))));await M__default.copy(o,n,{overwrite:false,errorOnExist:false}),await M__default.remove(o);}}async function Zl(t,e){let r=e.schema===Qr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$4(e,r,"Workspace snapshot manifest"),await M__default.writeJson(P.join(t,"snapshot.json"),e,{spaces:2});}async function Ra(t){let e=P.join(t,"snapshot.json"),r=await M__default.readJson(e);if(!r||typeof r!="object"||![ql,Qr].includes(r.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let o=r,n=o.schema===Qr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$4(o,n,"Workspace snapshot manifest"),o.mode==="project"&&(o.schema!==Qr||o.recoveryScope?.kind!=="project"||!o.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return o}async function rm(t){let e=0,r=0,o=[t];for(;o.length>0;){let n=o.shift();if(!n)continue;let a=[];try{a=await M__default.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){let c=P.join(n,i.name);if(i.isDirectory()){o.push(c);continue}if(i.isFile())try{let l=await M__default.stat(c);e+=1,r+=l.size;}catch{}}}return {files:e,bytes:r}}async function on(t={}){let e=Ot(t.workspacePath),r=t.name?t.name:`snapshot-${hr()}`,o=en(r),n=P.join(wr(e),o),a=Qu(o);if(await M__default.pathExists(n))throw new Error(`Snapshot already exists: ${o}`);let i=fr(a);try{await M__default.ensureDir(i);let c=t.includeProjects?"full":"metadata",l=c==="full"?["."]:await tm(e,i);c==="full"&&(await M__default.copy(e,i,{filter:g=>rn(e,g)}),await Ql(i));let p={schema:Uu,name:o,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await Xl(e),workspacePath:e,copiedPaths:l,projects:await em(e)};return await Zl(a,p),await M__default.ensureDir(P.dirname(n)),await M__default.move(a,n,{overwrite:false}),await ct(e,{action:"snapshot.create",target:o,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:l,snapshotPath:n,projectCount:p.projects.length}}),{manifest:p,snapshotPath:n}}catch(c){throw await M__default.remove(a),await ct(e,{action:"snapshot.create",target:o,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function nn(t){let e=P.resolve(t.workspacePath),r=P.resolve(t.projectPath),o=P.relative(e,r);if(!o||o.startsWith("..")||P.isAbsolute(o)||o.split(P.sep).some(g=>g===".workspai"||g===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${r}`);let n=P.basename(r),a=en(`${t.namePrefix}-${n}-${hr()}-${It.randomBytes(3).toString("hex")}`),i=P.join(wr(e),a),c=Zu(e,a),l=P.join(fr(c),o),p=false;try{await M__default.ensureDir(P.dirname(l)),t.moveSource?(await M__default.move(r,l,{overwrite:false}),p=true):await M__default.copy(r,l,{overwrite:false,errorOnExist:true,filter:u=>rn(r,u)});let g={schema:Qr,name:a,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await Xl(e),workspacePath:e,copiedPaths:[o],projects:[{name:n,relativePath:o}],recoveryScope:{kind:"project",projectName:n,relativePath:o}};return await Zl(c,g),await M__default.move(c,i,{overwrite:false}),await ct(e,{action:"snapshot.create",target:a,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[o],snapshotPath:i,projectCount:1}}),{manifest:g,snapshotPath:i}}catch(g){if(p&&!await M__default.pathExists(r)){let u=await M__default.pathExists(l)?l:P.join(fr(i),o);await M__default.pathExists(u)&&(await M__default.ensureDir(P.dirname(r)),await M__default.move(u,r,{overwrite:false}));}throw await M__default.remove(c),await M__default.remove(i),await ct(e,{action:"snapshot.create",target:a,status:"failed",reason:t.reason,details:{mode:"project",error:g instanceof Error?g.message:String(g)}}),g}}async function ep(t){let e=Ot(t.workspacePath),r=P.join(wr(e),en(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Ra(r),n=fr(r),a=await rm(n);return {manifest:o,snapshotPath:r,filesRoot:n,estimatedFileCount:a.files,estimatedBytes:a.bytes}}async function tp(t={}){let e=Ot(t.workspacePath),r=wr(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let a of o){if(!a.isDirectory())continue;let i=P.join(r,a.name);try{n.push({...await Ra(i),snapshotPath:i});}catch{}}return n.sort((a,i)=>i.createdAt.localeCompare(a.createdAt))}var om=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function nm(t){let e=P.dirname(t.workspacePath),r=P.basename(t.workspacePath),o=`${hr()}-${It.randomBytes(4).toString("hex")}`,n=P.join(e,`.${r}.restore-staging-${o}`),a=P.join(e,`.${r}.pre-restore-${o}`),i=P.join(e,`.${r}.restore-failed-${o}`),c=[],l=false,p=false;try{await M__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:g=>rn(t.filesRoot,g)}),await Ql(n),await M__default.rename(t.workspacePath,a),l=true,await M__default.rename(n,t.workspacePath),p=true;for(let g of om){let u=P.join(a,g);if(!await M__default.pathExists(u))continue;let f=P.join(t.workspacePath,g);if(await M__default.pathExists(f))throw new Error(`Full restore operational path collision: ${g}`);await M__default.ensureDir(P.dirname(f)),await M__default.rename(u,f),c.push(g);}return a}catch(g){for(let u of [...c].reverse()){let f=P.join(t.workspacePath,u),b=P.join(a,u);await M__default.pathExists(f)&&(await M__default.ensureDir(P.dirname(b)),await M__default.rename(f,b));}throw p&&await M__default.pathExists(t.workspacePath)&&await M__default.rename(t.workspacePath,i),l&&await M__default.pathExists(a)&&await M__default.rename(a,t.workspacePath),await M__default.remove(i),await M__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${g instanceof Error?g.message:String(g)}`)}}async function rp(t,e){let r=t.manifest.recoveryScope?.relativePath;if(!r)return;let o=P.join(fr(t.snapshotPath),r),n=P.join(e,r);await M__default.pathExists(o)&&!await M__default.pathExists(n)&&(await M__default.ensureDir(P.dirname(n)),await M__default.move(o,n,{overwrite:false})),await M__default.remove(t.snapshotPath);}async function op(t){let e=Ot(t.workspacePath),r=P.join(wr(e),en(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Ra(r),n=fr(r),a=o.mode==="full"?["."]:Array.from(new Set(o.copiedPaths.map(l=>{let p=w(l);return p.startsWith(".workspai/")?".workspai":p})));if(t.dryRun)return await ct(e,{action:"snapshot.restore",target:o.name,status:"planned",reason:t.reason,details:{restoredPaths:a}}),{workspacePath:e,snapshotPath:r,restoredPaths:a,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await tn(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let i;if(o.mode==="full")i=await nm({workspacePath:e,filesRoot:n,snapshotName:o.name});else if(o.mode==="project"){let l=o.recoveryScope?.relativePath;if(!l)throw new Error(`Project recovery snapshot is missing recoveryScope: ${o.name}`);let p=P.join(n,l),g=P.join(e,l),u=await M__default.pathExists(g),f,b=P.join(P.dirname(g),`.${P.basename(g)}.pre-restore-${process.pid}-${It.randomBytes(4).toString("hex")}`),k=false;u&&t.safetySnapshot!==false?(f=await nn({workspacePath:e,projectPath:g,namePrefix:`pre-restore-${o.name}`,reason:`Automatic project recovery snapshot before restoring ${o.name}`,moveSource:true}),i=f.snapshotPath):u&&(await M__default.rename(g,b),k=true);let S=P.join(P.dirname(g),`.${P.basename(g)}.restore-${process.pid}-${It.randomBytes(4).toString("hex")}`);try{await M__default.copy(p,S,{overwrite:false,errorOnExist:true}),await M__default.rename(S,g),k&&await M__default.remove(b);}catch(A){throw await M__default.remove(S),k&&await M__default.pathExists(b)&&(await M__default.remove(g),await M__default.rename(b,g)),f&&await rp(f,e),A}}else t.safetySnapshot!==false&&(i=(await on({workspacePath:e,name:`pre-restore-${o.name}-${hr()}`,reason:`Automatic safety snapshot before restoring ${o.name}`,includeProjects:false})).snapshotPath);if(o.mode==="metadata"){let l=new Set;for(let p of o.copiedPaths){let g=w(p);l.has(g)||(await M__default.copy(P.join(n,p),P.join(e,g),{overwrite:true,errorOnExist:false}),l.add(g));}}let c={workspacePath:e,snapshotPath:r,restoredPaths:a,dryRun:false,safetySnapshotPath:i};return await ct(e,{action:"snapshot.restore",target:o.name,status:"succeeded",reason:t.reason,details:{restoredPaths:a,safetySnapshotPath:i}}),c}function np(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function ap(t,e){let r=np(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(t,r),n=async c=>{let[l,p,g]=await Promise.all([M__default.realpath(t),M__default.realpath(c),M__default.stat(c)]),u=P.relative(l,p);if(!g.isDirectory()||!u||u===".."||u.startsWith(`..${P.sep}`)||P.isAbsolute(u))throw new Error(`Project ${e} is not a directory contained by the workspace.`);return c};if(o.startsWith(`${P.resolve(t)}${P.sep}`)&&await M__default.pathExists(o))return n(o);let i=(await a$h(t,{descendIntoMatchedProjects:false})).filter(c=>{let l=P.relative(t,c);return P.basename(c)===r||l===r});if(i.length===0){let l=(await a$k(t)).filter(u=>{let f=u.relativePath?.replace(/\\/g,"/");return u.name===r||f===r.replace(/\\/g,"/")||P.resolve(t,u.path)===o}),p=[...new Set(l.map(u=>P.resolve(t,u.path)))];if(p.length>1)throw new Error(`Project reference is ambiguous: ${e}`);let g=p[0];if(g&&!g.startsWith(`${P.resolve(t)}${P.sep}`))throw new Error(`Project ${e} is a linked external project and cannot be archived or deleted by workspace lifecycle commands. Only managed projects contained by the workspace support archive/delete; manage the external source or its workspace registration explicitly.`);if(g&&await M__default.pathExists(g))return n(g);throw new Error(`Project not found in workspace: ${e}`)}if(i.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return n(i[0])}async function xa(t){let{syncWorkspaceProjects:e}=await import('./workspace-PAXTJCMH.js');await e(t,true);let{syncWorkspaceContract:r}=await import('./workspace-contract-VWPOIYHJ.js');await r({workspacePath:t,strict:true});let{syncWorkspaceProjectLenses:o}=await import('./project-intelligence-lens-YWICXW6P.js');await o({workspacePath:t,mode:"managed"});}function am(t,e){let r=It.randomBytes(4).toString("hex");return P.join(Zr(t),`${e}-${hr()}-${r}`)}async function sp(t){let e=ip(t),r=await M__default.readJson(e);if(!r||typeof r!="object"||r.schema!==zl)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$4(r,"contracts/project-archive.v1.json","Project archive manifest"),r}function ip(t){return [vt,Zo].map(e=>P.join(t,e)).find(e=>M__default.existsSync(e))??P.join(t,vt)}async function _a(t={}){let e=Ot(t.workspacePath),r=Zr(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let a of o){if(!a.isDirectory())continue;let i=P.join(r,a.name),c=[vt,Zo].map(l=>P.join(i,l)).find(l=>M__default.existsSync(l))??P.join(i,vt);try{n.push({...await sp(i),archivePath:i,manifestPath:c});}catch{}}return n.sort((a,i)=>i.archivedAt.localeCompare(a.archivedAt))}async function sm(t,e){let r=np(e),o=P.isAbsolute(r)?P.resolve(r):P.resolve(Zr(t),r);if(o.startsWith(`${P.resolve(Zr(t))}${P.sep}`)&&(await M__default.pathExists(P.join(o,vt))||await M__default.pathExists(P.join(o,Zo))))return o;let a=(await _a({workspacePath:t})).filter(i=>P.basename(i.archivePath)===r||i.projectName===r||P.relative(Zr(t),i.archivePath)===r);if(a.length===0)throw new Error(`Archived project not found: ${e}`);if(a.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return a[0].archivePath}async function Ia(t){let e=Ot(t.workspacePath),r=await ap(e,t.project),o=P.basename(r),n=am(e,o),a=P.join(n,vt),i=`${n}.tmp-${process.pid}`,c=P.join(i,vt);for(let u of [vt,Zo])if(await M__default.pathExists(P.join(r,u)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${u}`);if(t.dryRun)return await ct(e,{action:"project.archive",target:o,status:"planned",reason:t.reason,details:{projectPath:r,archivePath:n}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:a,dryRun:true};await tn(e,"project.archive",{reason:t.reason,safetySnapshot:true});let l=await nn({workspacePath:e,projectPath:r,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${o}`,moveSource:false}),p={schema:zl,projectName:o,originalPath:r,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:l.snapshotPath};a$4(p,"contracts/project-archive.v1.json","Project archive manifest");let g=false;try{await M__default.ensureDir(P.dirname(n)),await M__default.move(r,i,{overwrite:false}),g=true,await M__default.writeJson(c,p,{spaces:2}),await M__default.rename(i,n);}catch(u){if(g&&!await M__default.pathExists(r)){let f=await M__default.pathExists(i)?i:n;await M__default.pathExists(f)&&(await M__default.remove(P.join(f,vt)),await M__default.move(f,r,{overwrite:false}));}throw await M__default.remove(i),u}return await c$4(e,[r]),await xa(e),await ct(e,{action:"project.archive",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath,dryRun:false}}async function cp(t){if(!t.permanent)return Ia(t);let e=Ot(t.workspacePath),r=await ap(e,t.project),o=P.basename(r);if(t.confirm!==o)throw new Error(`Permanent delete requires --confirm ${o}`);if(t.dryRun)return await ct(e,{action:"project.delete",target:o,status:"planned",reason:t.reason,details:{projectPath:r,permanent:true}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",dryRun:true};await tn(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await nn({workspacePath:e,projectPath:r,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${o}`,moveSource:true});return await c$4(e,[r]),await xa(e),await ct(e,{action:"project.delete",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function lp(t){let e=Ot(t.workspacePath),r=await sm(e,t.archive),o=await sp(r),n=t.targetName?.trim()||o.projectName,a=P.join(e,n);if(!a.startsWith(`${P.resolve(e)}${P.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await M__default.pathExists(a)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${a}`);if(t.dryRun)return await ct(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:r,projectPath:a}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:r,manifestPath:P.join(r,vt),dryRun:true};await tn(e,"project.restore",{reason:t.reason,safetySnapshot:true});let i=await M__default.pathExists(a),c=i?await nn({workspacePath:e,projectPath:a,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await on({workspacePath:e,name:`pre-restore-project-${n}-${hr()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),l=ip(r),p=q$1(e,"audit","restores",`${P.basename(r)}.json`);try{await M__default.move(r,a,{overwrite:false}),await M__default.ensureDir(P.dirname(p)),await M__default.move(P.join(a,P.basename(l)),p,{overwrite:false});}catch(g){throw await M__default.pathExists(a)&&(await M__default.pathExists(p)&&await M__default.move(p,P.join(a,P.basename(l)),{overwrite:false}),await M__default.pathExists(r)||await M__default.move(a,r,{overwrite:false})),i&&await rp(c,e),g}return await xa(e),await ct(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:r,projectPath:a,restoreReceiptPath:p,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:r,manifestPath:p,safetySnapshotPath:c.snapshotPath,dryRun:false}}var cm="rapidkit.infra-stack.v1",dp=s$2.infraPlan.schemaVersion,yr=".workspai/infra/docker-compose.yml",kr=t.infraPlan,$a=".workspai/infra/.env.example";function lm(){let t=P.dirname(fileURLToPath(import.meta.url)),e=[P.join(t,"../../contracts/infra-stack.v1.json"),P.join(t,"../contracts/infra-stack.v1.json")];for(let r of e)if(O.existsSync(r))return r;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var Na=null;function Kt(t){if(Na)return Na;let e=lm(),r=O.readFileSync(e,"utf-8"),o=JSON.parse(r);if(o.schemaVersion!==cm)throw new Error(`Unsupported infra stack schema: ${o.schemaVersion}`);return pm(o),(Na=o),o}function pm(t){let e=new Set(Object.keys(t.services));for(let[r,o]of Object.entries(t.moduleMappings)){if(!Array.isArray(o))throw new Error(`Invalid moduleMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`moduleMappings/${r} references unknown service '${n}'`)}for(let[r,o]of Object.entries(t.envVarMappings)){if(!Array.isArray(o))throw new Error(`Invalid envVarMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`envVarMappings/${r} references unknown service '${n}'`)}}function up(t,e){let r=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[r]||[]}function vr(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function mp(t,e){let r={};for(let o of e){let n=t.services[o];n&&Object.assign(r,n.connectionEnv);}return r}async function um(t){let e=P.join(t,"registry.json");if(!await M__default.pathExists(e))return [];try{let o=(await M__default.readJson(e)).installed_modules||[];return [...new Set(o.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function mm(t){let e=P.join(t,".env.example");if(!await M__default.pathExists(e))return [];try{let r=await M__default.readFile(e,"utf-8"),o=[];for(let n of r.split(`
-`)){let a=n.trim();if(!a||a.startsWith("#"))continue;let i=a.match(/^([A-Z0-9_]+)=/);i?.[1]&&o.push(i[1]);}return o}catch{return []}}async function gm(t){let e=t$1(t,"infra","overrides.json").find(r=>existsSync(r));if(!e)return [];try{let r=await M__default.readJson(e);return Array.isArray(r.services)?[...new Set(r.services.filter(o=>typeof o=="string"&&o.trim().length>0))]:[]}catch{return []}}async function fm(t$1){let e=await g$1(t$1,t.workspaceContract);if(!e)return [];try{let r=await M__default.readJson(e),o=[];for(let n of r.projects||[]){let a=typeof n.slug=="string"?n.slug:"unknown";for(let i of n.contracts?.env||[])typeof i=="string"&&i.trim()&&o.push({project:a,env:i.trim().toUpperCase()});}return o}catch{return []}}function an(t,e,r,o){t.add(r),e.push(o);}async function gp(t){let e=P.resolve(t.workspacePath),r=t.contract||Kt(),o=new Set,n=[],a=new Set,i=new Set,c=new Set,l=await l$4(e);for(let p of l){let g=P.dirname(P.dirname(p)),u=P.basename(g);for(let f of await um(g)){a.add(f);for(let b of up(r,f))an(o,n,b,{kind:"module",value:f,project:u});}for(let f of await mm(g)){i.add(f);for(let b of vr(r,f))an(o,n,b,{kind:"env-var",value:f,project:u});}}for(let p of await fm(e)){i.add(p.env);for(let g of vr(r,p.env))an(o,n,g,{kind:"contract-env",value:p.env,project:p.project});}for(let p of await gm(e))c.add(p),an(o,n,p,{kind:"override",value:p});return {modules:[...a].sort(),envVars:[...i].sort(),overrides:[...c].sort(),sources:n,serviceIds:[...o].sort()}}function hm(t){let e=t.trim();if(!e||e.startsWith("#"))return null;let r=e.indexOf("=");if(r<=0)return null;let o=e.slice(0,r).trim();if(!/^[A-Z0-9_]+$/.test(o))return null;let n=e.slice(r+1).trim();(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))&&(n=n.slice(1,-1));let a=n.match(/^\$\{[A-Z0-9_]+:-([^}]+)\}$/),i=(a?a[1]:n).trim();return i?{key:o,value:i}:null}async function wm(t){if(!await M__default.pathExists(t))return {};try{let e=await M__default.readFile(t,"utf-8"),r={};for(let o of e.split(`
-`)){let n=hm(o);n&&(r[n.key]=n.value);}return r}catch{return {}}}async function hp(t){let e={},r=await l$4(t.workspacePath);for(let o of r){let n=P.dirname(P.dirname(o)),a=await wm(P.join(n,".env.example"));for(let[i,c]of Object.entries(a))vr(t.contract,i).length>0&&(e[i]=c);}return e}function wp(t,e){return t.filter(r=>vr(e,r).length>0).sort()}function yp(t){let e=t.RAPIDKIT_DB_POSTGRES_URL||t.DATABASE_URL;if(e?.startsWith("postgresql://"))try{let r=new URL(e),o=r.pathname.replace(/^\//,"");return {POSTGRES_USER:decodeURIComponent(r.username||"postgres"),POSTGRES_PASSWORD:decodeURIComponent(r.password||"postgres"),POSTGRES_DB:o||"postgres"}}catch{return}}function kp(t){let e=t.POSTGRES_USER||"postgres",r=t.POSTGRES_DB||"postgres";return ["CMD-SHELL",`pg_isready -U ${e} -d ${r}`]}function ym(t){return /[:#{}[\],&*!|>'"%@`]/.test(t)||t.includes(`
-`)?JSON.stringify(t):t}function vp(t,e){return Object.entries(t).map(([r,o])=>`${e}${r}: ${ym(o)}`).join(`
-`)}function km(t,e){let r=t.test.map(o=>JSON.stringify(o)).join(", ");return [`${e}healthcheck:`,`${e}  test: [${r}]`,`${e}  interval: ${t.interval}`,`${e}  timeout: ${t.timeout}`,`${e}  retries: ${t.retries}`].join(`
-`)}function Pp(t){let e=["# Generated by Workspai infra plan \u2014 do not edit manually.",`# Workspace: ${t.workspaceName}`,`# Generated at: ${t.plan.generatedAt}`,"name: workspai-infra"],r=new Set;if(t.plan.services.length===0)return e.push("services: {}"),e.push(""),e.join(`
-`);e.push("services:");for(let o of t.plan.services){let n=t.contract.services[o.id];if(n){if(e.push(`  ${o.id}:`),e.push(`    image: ${n.image}`),e.push(`    container_name: workspai-${o.id}`),n.command?.length){let a=n.command.map(i=>JSON.stringify(i)).join(", ");e.push(`    command: [${a}]`);}if(n.env&&Object.keys(n.env).length>0){e.push("    environment:");let a={...n.env,...t.plan.serviceEnvOverrides?.[o.id]||{}};e.push(vp(a,"      "));}else t.plan.serviceEnvOverrides?.[o.id]&&(e.push("    environment:"),e.push(vp(t.plan.serviceEnvOverrides[o.id],"      ")));if(n.ports.length>0){e.push("    ports:");for(let a of n.ports)e.push(`      - "${a.host}:${a.container}"`);}if(n.volumes?.length){e.push("    volumes:");for(let a of n.volumes){e.push(`      - ${a}`);let i=a.split(":")[0];i&&!i.startsWith("/")&&r.add(i);}}if(n.healthcheck){let a=t.plan.serviceEnvOverrides?.[o.id];if(o.id==="postgres"&&a){let i=kp(a).map(c=>JSON.stringify(c)).join(", ");e.push("    healthcheck:"),e.push(`      test: [${i}]`),e.push(`      interval: ${n.healthcheck.interval}`),e.push(`      timeout: ${n.healthcheck.timeout}`),e.push(`      retries: ${n.healthcheck.retries}`);}else e.push(km(n.healthcheck,"    "));}e.push("    restart: unless-stopped");}}if(r.size>0){e.push("volumes:");for(let o of [...r].sort())e.push(`  ${o}:`),e.push("    driver: local");}return e.push(""),e.join(`
-`)}function Pm(t,e,r){return t.kind==="override"?t.value===e:t.kind==="module"?r.moduleMappings[t.value]?.includes(e)??false:r.envVarMappings[t.value.toUpperCase()]?.includes(e)??false}function jm(t){let e=new Map,r=[];for(let o of t)for(let n of o.ports){let a=e.get(n.host);a&&a!==o.id?r.push(`Port collision on host ${n.host} between services '${a}' and '${o.id}'`):e.set(n.host,o.id);}return r}async function bm(t){let e=t$1(t,"workspace.json").find(r=>existsSync(r));if(e)try{let r=await M__default.readJson(e);return r.workspace_name||r.name}catch{return}}async function Ma(t$1){let e=P.resolve(t$1.workspacePath),r=Kt(),o=await gp({workspacePath:e,contract:r}),n=o.serviceIds.map(f=>{let b=r.services[f];return b?{id:f,displayName:b.displayName,category:b.category,image:b.image,ports:b.ports,sources:o.sources.filter(k=>Pm(k,f,r))}:null}).filter(f=>f!==null),a=jm(n);n.length===0&&a.push("No infrastructure services detected. Install modules with infra dependencies or add .workspai/infra/overrides.json");for(let f of o.overrides)r.services[f]||a.push(`Override references unknown service '${f}'`);let i=await g$1(e,t.workspaceContract)?t.workspaceContract:void 0,c=mp(r,o.serviceIds),l=await hp({workspacePath:e,contract:r}),p={...c,...l};l.RAPIDKIT_DB_POSTGRES_URL&&(p.DATABASE_URL=l.RAPIDKIT_DB_POSTGRES_URL);let g={},u=yp(p);return u&&o.serviceIds.includes("postgres")&&(g.postgres=u),{schemaVersion:dp,generatedAt:(t$1.now||(()=>new Date))().toISOString(),workspacePath:e,workspaceName:await bm(e),contractPath:i,strategy:"sidecar",composePath:yr,envExamplePath:$a,services:n,connectionEnv:p,serviceEnvOverrides:Object.keys(g).length>0?g:void 0,sources:{modules:o.modules,envVars:o.envVars,overrides:o.overrides},warnings:a}}async function Wa(t){let e=P.resolve(t.workspacePath),r=P.join(e,yr),o=P.join(e,kr),n=P.join(e,$a),a=Kt();a$4(t.plan,"contracts/infra-plan.v1.json","Workspai infrastructure plan");let i=Pp({plan:t.plan,contract:a,workspaceName:t.plan.workspaceName||P.basename(e)}),c=["# Generated by: npx workspai infra plan","# Copy values into project .env files as needed.",...Object.entries(t.plan.connectionEnv).map(([l,p])=>`${l}=${p}`),""].join(`
-`);return t.dryRun?{composePath:r,planPath:o,envExamplePath:n}:(await M__default.ensureDir(P.dirname(r)),await M__default.ensureDir(P.dirname(o)),await M__default.writeFile(r,i,"utf-8"),await M__default.writeFile(o,`${JSON.stringify(t.plan,null,2)}
-`,"utf-8"),await M__default.writeFile(n,c,"utf-8"),{composePath:r,planPath:o,envExamplePath:n})}function Cm(t){return P.resolve(t).split(P.sep).join("/")}async function bp(){if((await execa("docker",["compose","version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker",prefixArgs:["compose"]};if((await execa("docker-compose",["version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker-compose",prefixArgs:[]};throw new Error("Docker Compose is not available. Install Docker Desktop or the docker-compose plugin, then verify with: docker compose version")}async function Sm(){if((await execa("docker",["version"],{reject:false,timeout:5e3})).exitCode!==0)throw new Error("Docker is not available in PATH. Install Docker and ensure the daemon is running before using rapidkit infra.");await bp();}function Cp(t){let e=t.toLowerCase();return e.includes("no space left on device")?"Docker failed because the disk is full. Free space with: docker system prune -f (or docker system prune -a --volumes -f).":e.includes("address already in use")||e.includes("bind")?"Docker failed to bind a host port. Stop the conflicting service or adjust ports in contracts/infra-stack.v1.json via .workspai/infra/overrides.json.":e.includes("cannot connect to the docker daemon")?"Docker daemon is not running. Start Docker Desktop or the docker service, then retry.":null}async function Sp(t){await Sm();let e=await bp(),r=Cm(t.composePath),o=await execa(e.command,[...e.prefixArgs,"-f",r,...t.args],{cwd:t.workspacePath,reject:false});return {exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr}}function cn(t){let e=t?P.resolve(t):Aa(process.cwd())??b$4({startPath:process.cwd()})?.workspacePath??null;if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");return a$9(e)}function Em(t){return P.join(t,yr)}async function Da(t){let e=P.join(t,kr);if(!await M__default.pathExists(e))throw new Error(`Infra plan not found at ${kr}. Run: npx workspai infra plan`);let r=await M__default.readJson(e);return a$4(r,"contracts/infra-plan.v1.json",`Infra plan ${e}`),r}async function La(t){let e=Em(t.workspacePath);if(!await M__default.pathExists(e))throw new Error(`Compose file not found at ${yr}. Run: npx workspai infra plan`);return Sp({composePath:e,workspacePath:t.workspacePath,args:t.args})}function Am(t,e={}){if(console.log(s.bold(`
+Wrote manifest: ${b.resolve(process.cwd(),e)}
+`));}function ep(t){let e=t.command("product",{hidden:true}).description("Product Factory commands for private workspace product manifests");e.command("plan <backlog>").description("Build a deterministic Product Factory plan from a workspace backlog JSON").option("--output <file>","Write plan JSON to file").option("--kit <kit>","Default API kit for generated product manifests","fastapi.standard").option("--tier <tier>","Filter products by tier").option("--category <category>","Filter products by category").option("--limit <count>","Limit planned products").option("--json","Print JSON to stdout").action(async(r,o)=>{try{let n=o.output||zl("--output"),a=await Zl({backlogPath:r,kit:o.kit,tier:o.tier,category:o.category,limit:o.limit});a$4(a,"contracts/product-factory-plan.v1.json","Product Factory plan"),n&&await Xl(n,a,true),o.json?console.log(kr(a)):rm(a,n);}catch(n){let a=n instanceof Error?n.message:String(n);o.json?console.log(kr({ok:false,error:{message:a}})):console.error(s.red(`Product plan failed: ${a}`)),process.exit(1);}}),e.command("manifest").description("Create or inspect private product manifests").command("create <slug>").description("Create a private product manifest from a backlog product slug").requiredOption("--from-backlog <file>","Source workspace backlog JSON").option("--output <fileOrDir>","Manifest output file or directory").option("--kit <kit>","API kit for the generated workspace product","fastapi.standard").option("--workspace-output <dir>","Suggested root for generated product workspaces").option("--json","Print JSON to stdout").option("--force","Overwrite existing manifest file").action(async(r,o)=>{try{let n=o.output||zl("--output");Ql(r);let a=await em({backlogPath:o.fromBacklog,slug:r,kit:o.kit,outputRoot:o.workspaceOutput});a$4(a,"contracts/private-product-manifest.v1.json","Private product manifest");let i=tm(n,r);await Xl(i,a,o.force===true),o.json?console.log(kr(a)):om(a,i);}catch(n){let a=n instanceof Error?n.message:String(n);o.json?console.log(kr({ok:false,error:{message:a}})):console.error(s.red(`Product manifest create failed: ${a}`)),process.exit(1);}});}var rp="rapidkit-workspace-snapshot-v1",to="rapidkit-workspace-snapshot-v2",nm=rp,op="rapidkit-project-archive-v1",vt="workspai-archive.json",on="rapidkit-archive.json",am=[".workspai/workspace.json",t.workspaceContract,t.workspaceRegistry,".workspai/imported-projects.json",".workspai/policies.yml",".workspai/toolchain.lock",".workspai/cache-config.yml",".workspai-workspace","workspai.config.json","workspai.config.js","workspai.config.cjs","workspai.config.mjs",".rapidkit/workspace.json",".rapidkit-workspace","rapidkit.config.json","rapidkit.config.js","rapidkit.config.cjs","rapidkit.config.mjs","package.json"],sm=new Set([".git","node_modules",".venv","dist","build","target","coverage","htmlcov",".next"]),eo={requireReasonForDestructiveOps:false,requireSafetySnapshotForDestructiveOps:true,allowPermanentDelete:true};function Pr(t=new Date){return t.toISOString().replace(/[:.]/g,"-")}function nn(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");if(!e)throw new Error("Snapshot name must contain at least one letter or number.");return e.slice(0,120)}async function np(t){try{let e=await M__default.readJson(t);return e&&typeof e=="object"&&!Array.isArray(e)?e:null}catch{return null}}function im(t,e){if(!t)return e;let r=t.trim().toLowerCase();return ["true","yes","1","on"].includes(r)?true:["false","no","0","off"].includes(r)?false:e}async function cm(t){let e=t$1(t,"policies.yml").find(r=>existsSync(r))??q$1(t,"policies.yml");if(!await M__default.pathExists(e))return {...eo};try{let r=await M__default.readFile(e,"utf-8"),o=(n,a)=>{let i=r.match(new RegExp(`^\\s*${n}:\\s*([^#\\n]+)`,"m"));return im(i?.[1],a)};return {requireReasonForDestructiveOps:o("require_reason_for_destructive_ops",eo.requireReasonForDestructiveOps),requireSafetySnapshotForDestructiveOps:o("require_safety_snapshot_for_destructive_ops",eo.requireSafetySnapshotForDestructiveOps),allowPermanentDelete:o("allow_permanent_delete",eo.allowPermanentDelete)}}catch{return {...eo}}}function lm(t){return q$1(t,"audit","events.jsonl")}async function ct(t,e){let r={schema:"rapidkit-workspace-audit-event-v1",id:Ot.randomUUID(),timestamp:new Date().toISOString(),workspacePath:t,...e},o=lm(t);return await M__default.ensureDir(b.dirname(o)),await M__default.appendFile(o,`${JSON.stringify(r)}
+`,"utf-8"),r}async function an(t,e,r){let o=await cm(t);if(o.requireReasonForDestructiveOps&&!r.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(o.requireSafetySnapshotForDestructiveOps&&r.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(r.permanent&&!o.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return o}function $a(t=process.cwd()){let e=b.resolve(t),r=b.resolve(ja.tmpdir());for(;;){if(e!==r&&k$1(e))return e;let o=b.dirname(e);if(o===e)return null;e=o;}}function Nt(t){let e=t?b.resolve(t):$a(process.cwd())??b$5({startPath:process.cwd()})?.workspacePath??null;if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!k$1(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function ap(t){let e=await np(t$1(t,"workspace.json").find(o=>existsSync(o))??q$1(t,"workspace.json")),r=e?.workspace_name??e?.name;return typeof r=="string"&&r.trim()?r.trim():b$e(t)}function br(t){return q$1(t,"snapshots")}function ro(t){return q$1(t,"archive","projects")}function vr(t){return b.join(t,"files")}function pm(t){return b.join(ja.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${Ot.randomBytes(4).toString("hex")}`)}function dm(t,e){return b.join(br(t),`.tmp-${process.pid}-${e}-${Ot.randomBytes(4).toString("hex")}`)}function sn(t,e){let r=b.relative(t,e);if(!r)return  true;let o=r.split(b.sep);return (o[0]===".workspai"||o[0]===".rapidkit")&&["snapshots","archive","audit"].includes(o[1]||"")?false:!o.some(n=>sm.has(n)||a$h(n))}async function um(t){let e=await a$i(t,{descendIntoMatchedProjects:false}),r=new Map;for(let n of e){let a=b.relative(t,n).replace(/\\/g,"/");r.set(a,{name:b.basename(n),relativePath:a});}let o=await np(t$1(t,"workspace.contract.json").find(n=>existsSync(n))??q$1(t,"workspace.contract.json"));if(Array.isArray(o?.projects))for(let n of o.projects){if(!n||typeof n!="object")continue;let a=n,i=typeof a.relativePath=="string"?a.relativePath.replace(/\\/g,"/"):"",c=typeof a.slug=="string"?a.slug.trim():"";!i||!c||i.startsWith("../")||b.isAbsolute(i)||r.set(i,{name:c,relativePath:i});}return [...r.values()].sort((n,a)=>n.relativePath.localeCompare(a.relativePath))}async function mm(t,e){let r=[],o=new Set;for(let n of am){let a=b.join(t,n);if(!await M__default.pathExists(a))continue;let i=w(n);if(o.has(i))continue;let c=b.join(e,i);await M__default.copy(a,c,{filter:l=>sn(t,l)}),r.push(i),o.add(i);}return r}async function sp(t){let e=[];async function r(o){let n=[];try{n=await M__default.readdir(o,{withFileTypes:true});}catch{return}for(let a of n){let i=b.join(o,a.name);a.isDirectory()?a.name===".rapidkit"?e.push(i):await r(i):a.isFile()&&a.name===".rapidkit-workspace"&&e.push(i);}}await r(t),e.sort((o,n)=>n.length-o.length);for(let o of e){let n=b.join(b.dirname(o),b.basename(w(b.basename(o))));await M__default.copy(o,n,{overwrite:false,errorOnExist:false}),await M__default.remove(o);}}async function ip(t,e){let r=e.schema===to?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$4(e,r,"Workspace snapshot manifest"),await M__default.writeJson(b.join(t,"snapshot.json"),e,{spaces:2});}async function Ta(t){let e=b.join(t,"snapshot.json"),r=await M__default.readJson(e);if(!r||typeof r!="object"||![rp,to].includes(r.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let o=r,n=o.schema===to?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$4(o,n,"Workspace snapshot manifest"),o.mode==="project"&&(o.schema!==to||o.recoveryScope?.kind!=="project"||!o.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return o}async function gm(t){let e=0,r=0,o=[t];for(;o.length>0;){let n=o.shift();if(!n)continue;let a=[];try{a=await M__default.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){let c=b.join(n,i.name);if(i.isDirectory()){o.push(c);continue}if(i.isFile())try{let l=await M__default.stat(c);e+=1,r+=l.size;}catch{}}}return {files:e,bytes:r}}async function cn(t={}){let e=Nt(t.workspacePath),r=t.name?t.name:`snapshot-${Pr()}`,o=nn(r),n=b.join(br(e),o),a=pm(o);if(await M__default.pathExists(n))throw new Error(`Snapshot already exists: ${o}`);let i=vr(a);try{await M__default.ensureDir(i);let c=t.includeProjects?"full":"metadata",l=c==="full"?["."]:await mm(e,i);c==="full"&&(await M__default.copy(e,i,{filter:f=>sn(e,f)}),await sp(i));let p={schema:nm,name:o,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await ap(e),workspacePath:e,copiedPaths:l,projects:await um(e)};return await ip(a,p),await M__default.ensureDir(b.dirname(n)),await M__default.move(a,n,{overwrite:false}),await ct(e,{action:"snapshot.create",target:o,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:l,snapshotPath:n,projectCount:p.projects.length}}),{manifest:p,snapshotPath:n}}catch(c){throw await M__default.remove(a),await ct(e,{action:"snapshot.create",target:o,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function ln(t){let e=b.resolve(t.workspacePath),r=b.resolve(t.projectPath),o=b.relative(e,r);if(!o||o.startsWith("..")||b.isAbsolute(o)||o.split(b.sep).some(f=>f===".workspai"||f===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${r}`);let n=b.basename(r),a=nn(`${t.namePrefix}-${n}-${Pr()}-${Ot.randomBytes(3).toString("hex")}`),i=b.join(br(e),a),c=dm(e,a),l=b.join(vr(c),o),p=false;try{await M__default.ensureDir(b.dirname(l)),t.moveSource?(await M__default.move(r,l,{overwrite:false}),p=true):await M__default.copy(r,l,{overwrite:false,errorOnExist:true,filter:u=>sn(r,u)});let f={schema:to,name:a,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await ap(e),workspacePath:e,copiedPaths:[o],projects:[{name:n,relativePath:o}],recoveryScope:{kind:"project",projectName:n,relativePath:o}};return await ip(c,f),await M__default.move(c,i,{overwrite:false}),await ct(e,{action:"snapshot.create",target:a,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[o],snapshotPath:i,projectCount:1}}),{manifest:f,snapshotPath:i}}catch(f){if(p&&!await M__default.pathExists(r)){let u=await M__default.pathExists(l)?l:b.join(vr(i),o);await M__default.pathExists(u)&&(await M__default.ensureDir(b.dirname(r)),await M__default.move(u,r,{overwrite:false}));}throw await M__default.remove(c),await M__default.remove(i),await ct(e,{action:"snapshot.create",target:a,status:"failed",reason:t.reason,details:{mode:"project",error:f instanceof Error?f.message:String(f)}}),f}}async function cp(t){let e=Nt(t.workspacePath),r=b.join(br(e),nn(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Ta(r),n=vr(r),a=await gm(n);return {manifest:o,snapshotPath:r,filesRoot:n,estimatedFileCount:a.files,estimatedBytes:a.bytes}}async function lp(t={}){let e=Nt(t.workspacePath),r=br(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let a of o){if(!a.isDirectory())continue;let i=b.join(r,a.name);try{n.push({...await Ta(i),snapshotPath:i});}catch{}}return n.sort((a,i)=>i.createdAt.localeCompare(a.createdAt))}var fm=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function hm(t){let e=b.dirname(t.workspacePath),r=b.basename(t.workspacePath),o=`${Pr()}-${Ot.randomBytes(4).toString("hex")}`,n=b.join(e,`.${r}.restore-staging-${o}`),a=b.join(e,`.${r}.pre-restore-${o}`),i=b.join(e,`.${r}.restore-failed-${o}`),c=[],l=false,p=false;try{await M__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:f=>sn(t.filesRoot,f)}),await sp(n),await M__default.rename(t.workspacePath,a),l=true,await M__default.rename(n,t.workspacePath),p=true;for(let f of fm){let u=b.join(a,f);if(!await M__default.pathExists(u))continue;let g=b.join(t.workspacePath,f);if(await M__default.pathExists(g))throw new Error(`Full restore operational path collision: ${f}`);await M__default.ensureDir(b.dirname(g)),await M__default.rename(u,g),c.push(f);}return a}catch(f){for(let u of [...c].reverse()){let g=b.join(t.workspacePath,u),j=b.join(a,u);await M__default.pathExists(g)&&(await M__default.ensureDir(b.dirname(j)),await M__default.rename(g,j));}throw p&&await M__default.pathExists(t.workspacePath)&&await M__default.rename(t.workspacePath,i),l&&await M__default.pathExists(a)&&await M__default.rename(a,t.workspacePath),await M__default.remove(i),await M__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${f instanceof Error?f.message:String(f)}`)}}async function pp(t,e){let r=t.manifest.recoveryScope?.relativePath;if(!r)return;let o=b.join(vr(t.snapshotPath),r),n=b.join(e,r);await M__default.pathExists(o)&&!await M__default.pathExists(n)&&(await M__default.ensureDir(b.dirname(n)),await M__default.move(o,n,{overwrite:false})),await M__default.remove(t.snapshotPath);}async function dp(t){let e=Nt(t.workspacePath),r=b.join(br(e),nn(t.name));if(!await M__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Ta(r),n=vr(r),a=o.mode==="full"?["."]:Array.from(new Set(o.copiedPaths.map(l=>{let p=w(l);return p.startsWith(".workspai/")?".workspai":p})));if(t.dryRun)return await ct(e,{action:"snapshot.restore",target:o.name,status:"planned",reason:t.reason,details:{restoredPaths:a}}),{workspacePath:e,snapshotPath:r,restoredPaths:a,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await an(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let i;if(o.mode==="full")i=await hm({workspacePath:e,filesRoot:n,snapshotName:o.name});else if(o.mode==="project"){let l=o.recoveryScope?.relativePath;if(!l)throw new Error(`Project recovery snapshot is missing recoveryScope: ${o.name}`);let p=b.join(n,l),f=b.join(e,l),u=await M__default.pathExists(f),g,j=b.join(b.dirname(f),`.${b.basename(f)}.pre-restore-${process.pid}-${Ot.randomBytes(4).toString("hex")}`),y=false;u&&t.safetySnapshot!==false?(g=await ln({workspacePath:e,projectPath:f,namePrefix:`pre-restore-${o.name}`,reason:`Automatic project recovery snapshot before restoring ${o.name}`,moveSource:true}),i=g.snapshotPath):u&&(await M__default.rename(f,j),y=true);let S=b.join(b.dirname(f),`.${b.basename(f)}.restore-${process.pid}-${Ot.randomBytes(4).toString("hex")}`);try{await M__default.copy(p,S,{overwrite:false,errorOnExist:true}),await M__default.rename(S,f),y&&await M__default.remove(j);}catch(E){throw await M__default.remove(S),y&&await M__default.pathExists(j)&&(await M__default.remove(f),await M__default.rename(j,f)),g&&await pp(g,e),E}}else t.safetySnapshot!==false&&(i=(await cn({workspacePath:e,name:`pre-restore-${o.name}-${Pr()}`,reason:`Automatic safety snapshot before restoring ${o.name}`,includeProjects:false})).snapshotPath);if(o.mode==="metadata"){let l=new Set;for(let p of o.copiedPaths){let f=w(p);l.has(f)||(await M__default.copy(b.join(n,p),b.join(e,f),{overwrite:true,errorOnExist:false}),l.add(f));}}let c={workspacePath:e,snapshotPath:r,restoredPaths:a,dryRun:false,safetySnapshotPath:i};return await ct(e,{action:"snapshot.restore",target:o.name,status:"succeeded",reason:t.reason,details:{restoredPaths:a,safetySnapshotPath:i}}),c}function up(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function mp(t,e){let r=up(e),o=b.isAbsolute(r)?b.resolve(r):b.resolve(t,r),n=async c=>{let[l,p,f]=await Promise.all([M__default.realpath(t),M__default.realpath(c),M__default.stat(c)]),u=b.relative(l,p);if(!f.isDirectory()||!u||u===".."||u.startsWith(`..${b.sep}`)||b.isAbsolute(u))throw new Error(`Project ${e} is not a directory contained by the workspace.`);return c};if(o.startsWith(`${b.resolve(t)}${b.sep}`)&&await M__default.pathExists(o))return n(o);let i=(await a$i(t,{descendIntoMatchedProjects:false})).filter(c=>{let l=b.relative(t,c);return b.basename(c)===r||l===r});if(i.length===0){let l=(await a$l(t)).filter(u=>{let g=u.relativePath?.replace(/\\/g,"/");return u.name===r||g===r.replace(/\\/g,"/")||b.resolve(t,u.path)===o}),p=[...new Set(l.map(u=>b.resolve(t,u.path)))];if(p.length>1)throw new Error(`Project reference is ambiguous: ${e}`);let f=p[0];if(f&&!f.startsWith(`${b.resolve(t)}${b.sep}`))throw new Error(`Project ${e} is a linked external project and cannot be archived or deleted by workspace lifecycle commands. Only managed projects contained by the workspace support archive/delete; manage the external source or its workspace registration explicitly.`);if(f&&await M__default.pathExists(f))return n(f);throw new Error(`Project not found in workspace: ${e}`)}if(i.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return n(i[0])}async function Ma(t){let{syncWorkspaceProjects:e}=await import('./workspace-CBQDOUSH.js');await e(t,true);let{syncWorkspaceContract:r}=await import('./workspace-contract-PMHUUKFM.js');await r({workspacePath:t,strict:true});let{syncWorkspaceProjectLenses:o}=await import('./project-intelligence-lens-JCHFOIA7.js');await o({workspacePath:t,mode:"managed"});}function wm(t,e){let r=Ot.randomBytes(4).toString("hex");return b.join(ro(t),`${e}-${Pr()}-${r}`)}async function gp(t){let e=fp(t),r=await M__default.readJson(e);if(!r||typeof r!="object"||r.schema!==op)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$4(r,"contracts/project-archive.v1.json","Project archive manifest"),r}function fp(t){return [vt,on].map(e=>b.join(t,e)).find(e=>M__default.existsSync(e))??b.join(t,vt)}async function Wa(t={}){let e=Nt(t.workspacePath),r=ro(e);if(!await M__default.pathExists(r))return [];let o=await M__default.readdir(r,{withFileTypes:true}),n=[];for(let a of o){if(!a.isDirectory())continue;let i=b.join(r,a.name),c=[vt,on].map(l=>b.join(i,l)).find(l=>M__default.existsSync(l))??b.join(i,vt);try{n.push({...await gp(i),archivePath:i,manifestPath:c});}catch{}}return n.sort((a,i)=>i.archivedAt.localeCompare(a.archivedAt))}async function ym(t,e){let r=up(e),o=b.isAbsolute(r)?b.resolve(r):b.resolve(ro(t),r);if(o.startsWith(`${b.resolve(ro(t))}${b.sep}`)&&(await M__default.pathExists(b.join(o,vt))||await M__default.pathExists(b.join(o,on))))return o;let a=(await Wa({workspacePath:t})).filter(i=>b.basename(i.archivePath)===r||i.projectName===r||b.relative(ro(t),i.archivePath)===r);if(a.length===0)throw new Error(`Archived project not found: ${e}`);if(a.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return a[0].archivePath}async function Da(t){let e=Nt(t.workspacePath),r=await mp(e,t.project),o=b.basename(r),n=wm(e,o),a=b.join(n,vt),i=`${n}.tmp-${process.pid}`,c=b.join(i,vt);for(let u of [vt,on])if(await M__default.pathExists(b.join(r,u)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${u}`);if(t.dryRun)return await ct(e,{action:"project.archive",target:o,status:"planned",reason:t.reason,details:{projectPath:r,archivePath:n}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:a,dryRun:true};await an(e,"project.archive",{reason:t.reason,safetySnapshot:true});let l=await ln({workspacePath:e,projectPath:r,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${o}`,moveSource:false}),p={schema:op,projectName:o,originalPath:r,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:l.snapshotPath};a$4(p,"contracts/project-archive.v1.json","Project archive manifest");let f=false;try{await M__default.ensureDir(b.dirname(n)),await M__default.move(r,i,{overwrite:false}),f=true,await M__default.writeJson(c,p,{spaces:2}),await M__default.rename(i,n);}catch(u){if(f&&!await M__default.pathExists(r)){let g=await M__default.pathExists(i)?i:n;await M__default.pathExists(g)&&(await M__default.remove(b.join(g,vt)),await M__default.move(g,r,{overwrite:false}));}throw await M__default.remove(i),u}return await c$4(e,[r]),await Ma(e),await ct(e,{action:"project.archive",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath,dryRun:false}}async function hp(t){if(!t.permanent)return Da(t);let e=Nt(t.workspacePath),r=await mp(e,t.project),o=b.basename(r);if(t.confirm!==o)throw new Error(`Permanent delete requires --confirm ${o}`);if(t.dryRun)return await ct(e,{action:"project.delete",target:o,status:"planned",reason:t.reason,details:{projectPath:r,permanent:true}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",dryRun:true};await an(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await ln({workspacePath:e,projectPath:r,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${o}`,moveSource:true});return await c$4(e,[r]),await Ma(e),await ct(e,{action:"project.delete",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function wp(t){let e=Nt(t.workspacePath),r=await ym(e,t.archive),o=await gp(r),n=t.targetName?.trim()||o.projectName,a=b.join(e,n);if(!a.startsWith(`${b.resolve(e)}${b.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await M__default.pathExists(a)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${a}`);if(t.dryRun)return await ct(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:r,projectPath:a}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:r,manifestPath:b.join(r,vt),dryRun:true};await an(e,"project.restore",{reason:t.reason,safetySnapshot:true});let i=await M__default.pathExists(a),c=i?await ln({workspacePath:e,projectPath:a,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await cn({workspacePath:e,name:`pre-restore-project-${n}-${Pr()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),l=fp(r),p=q$1(e,"audit","restores",`${b.basename(r)}.json`);try{await M__default.move(r,a,{overwrite:false}),await M__default.ensureDir(b.dirname(p)),await M__default.move(b.join(a,b.basename(l)),p,{overwrite:false});}catch(f){throw await M__default.pathExists(a)&&(await M__default.pathExists(p)&&await M__default.move(p,b.join(a,b.basename(l)),{overwrite:false}),await M__default.pathExists(r)||await M__default.move(a,r,{overwrite:false})),i&&await pp(c,e),f}return await Ma(e),await ct(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:r,projectPath:a,restoreReceiptPath:p,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:r,manifestPath:p,safetySnapshotPath:c.snapshotPath,dryRun:false}}var vm="rapidkit.infra-stack.v1",kp=s$2.infraPlan.schemaVersion,jr=".workspai/infra/docker-compose.yml",Cr=t.infraPlan,Ga=".workspai/infra/.env.example";function Pm(){let t=b.dirname(fileURLToPath(import.meta.url)),e=[b.join(t,"../../contracts/infra-stack.v1.json"),b.join(t,"../contracts/infra-stack.v1.json")];for(let r of e)if($.existsSync(r))return r;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var Fa=null;function Kt(t){if(Fa)return Fa;let e=Pm(),r=$.readFileSync(e,"utf-8"),o=JSON.parse(r);if(o.schemaVersion!==vm)throw new Error(`Unsupported infra stack schema: ${o.schemaVersion}`);return bm(o),(Fa=o),o}function bm(t){let e=new Set(Object.keys(t.services));for(let[r,o]of Object.entries(t.moduleMappings)){if(!Array.isArray(o))throw new Error(`Invalid moduleMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`moduleMappings/${r} references unknown service '${n}'`)}for(let[r,o]of Object.entries(t.envVarMappings)){if(!Array.isArray(o))throw new Error(`Invalid envVarMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`envVarMappings/${r} references unknown service '${n}'`)}}function vp(t,e){let r=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[r]||[]}function Sr(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function Pp(t,e){let r={};for(let o of e){let n=t.services[o];n&&Object.assign(r,n.connectionEnv);}return r}async function Cm(t){let e=b.join(t,"registry.json");if(!await M__default.pathExists(e))return [];try{let o=(await M__default.readJson(e)).installed_modules||[];return [...new Set(o.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function Sm(t){let e=b.join(t,".env.example");if(!await M__default.pathExists(e))return [];try{let r=await M__default.readFile(e,"utf-8"),o=[];for(let n of r.split(`
+`)){let a=n.trim();if(!a||a.startsWith("#"))continue;let i=a.match(/^([A-Z0-9_]+)=/);i?.[1]&&o.push(i[1]);}return o}catch{return []}}async function Em(t){let e=t$1(t,"infra","overrides.json").find(r=>existsSync(r));if(!e)return [];try{let r=await M__default.readJson(e);return Array.isArray(r.services)?[...new Set(r.services.filter(o=>typeof o=="string"&&o.trim().length>0))]:[]}catch{return []}}async function Am(t$1){let e=await g$1(t$1,t.workspaceContract);if(!e)return [];try{let r=await M__default.readJson(e),o=[];for(let n of r.projects||[]){let a=typeof n.slug=="string"?n.slug:"unknown";for(let i of n.contracts?.env||[])typeof i=="string"&&i.trim()&&o.push({project:a,env:i.trim().toUpperCase()});}return o}catch{return []}}function pn(t,e,r,o){t.add(r),e.push(o);}async function bp(t){let e=b.resolve(t.workspacePath),r=t.contract||Kt(),o=new Set,n=[],a=new Set,i=new Set,c=new Set,l=await l$4(e);for(let p of l){let f=b.dirname(b.dirname(p)),u=b.basename(f);for(let g of await Cm(f)){a.add(g);for(let j of vp(r,g))pn(o,n,j,{kind:"module",value:g,project:u});}for(let g of await Sm(f)){i.add(g);for(let j of Sr(r,g))pn(o,n,j,{kind:"env-var",value:g,project:u});}}for(let p of await Am(e)){i.add(p.env);for(let f of Sr(r,p.env))pn(o,n,f,{kind:"contract-env",value:p.env,project:p.project});}for(let p of await Em(e))c.add(p),pn(o,n,p,{kind:"override",value:p});return {modules:[...a].sort(),envVars:[...i].sort(),overrides:[...c].sort(),sources:n,serviceIds:[...o].sort()}}function Rm(t){let e=t.trim();if(!e||e.startsWith("#"))return null;let r=e.indexOf("=");if(r<=0)return null;let o=e.slice(0,r).trim();if(!/^[A-Z0-9_]+$/.test(o))return null;let n=e.slice(r+1).trim();(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))&&(n=n.slice(1,-1));let a=n.match(/^\$\{[A-Z0-9_]+:-([^}]+)\}$/),i=(a?a[1]:n).trim();return i?{key:o,value:i}:null}async function xm(t){if(!await M__default.pathExists(t))return {};try{let e=await M__default.readFile(t,"utf-8"),r={};for(let o of e.split(`
+`)){let n=Rm(o);n&&(r[n.key]=n.value);}return r}catch{return {}}}async function Cp(t){let e={},r=await l$4(t.workspacePath);for(let o of r){let n=b.dirname(b.dirname(o)),a=await xm(b.join(n,".env.example"));for(let[i,c]of Object.entries(a))Sr(t.contract,i).length>0&&(e[i]=c);}return e}function Sp(t,e){return t.filter(r=>Sr(e,r).length>0).sort()}function Ep(t){let e=t.RAPIDKIT_DB_POSTGRES_URL||t.DATABASE_URL;if(e?.startsWith("postgresql://"))try{let r=new URL(e),o=r.pathname.replace(/^\//,"");return {POSTGRES_USER:decodeURIComponent(r.username||"postgres"),POSTGRES_PASSWORD:decodeURIComponent(r.password||"postgres"),POSTGRES_DB:o||"postgres"}}catch{return}}function Ap(t){let e=t.POSTGRES_USER||"postgres",r=t.POSTGRES_DB||"postgres";return ["CMD-SHELL",`pg_isready -U ${e} -d ${r}`]}function Im(t){return /[:#{}[\],&*!|>'"%@`]/.test(t)||t.includes(`
+`)?JSON.stringify(t):t}function Rp(t,e){return Object.entries(t).map(([r,o])=>`${e}${r}: ${Im(o)}`).join(`
+`)}function _m(t,e){let r=t.test.map(o=>JSON.stringify(o)).join(", ");return [`${e}healthcheck:`,`${e}  test: [${r}]`,`${e}  interval: ${t.interval}`,`${e}  timeout: ${t.timeout}`,`${e}  retries: ${t.retries}`].join(`
+`)}function xp(t){let e=["# Generated by Workspai infra plan \u2014 do not edit manually.",`# Workspace: ${t.workspaceName}`,`# Generated at: ${t.plan.generatedAt}`,"name: workspai-infra"],r=new Set;if(t.plan.services.length===0)return e.push("services: {}"),e.push(""),e.join(`
+`);e.push("services:");for(let o of t.plan.services){let n=t.contract.services[o.id];if(n){if(e.push(`  ${o.id}:`),e.push(`    image: ${n.image}`),e.push(`    container_name: workspai-${o.id}`),n.command?.length){let a=n.command.map(i=>JSON.stringify(i)).join(", ");e.push(`    command: [${a}]`);}if(n.env&&Object.keys(n.env).length>0){e.push("    environment:");let a={...n.env,...t.plan.serviceEnvOverrides?.[o.id]||{}};e.push(Rp(a,"      "));}else t.plan.serviceEnvOverrides?.[o.id]&&(e.push("    environment:"),e.push(Rp(t.plan.serviceEnvOverrides[o.id],"      ")));if(n.ports.length>0){e.push("    ports:");for(let a of n.ports)e.push(`      - "${a.host}:${a.container}"`);}if(n.volumes?.length){e.push("    volumes:");for(let a of n.volumes){e.push(`      - ${a}`);let i=a.split(":")[0];i&&!i.startsWith("/")&&r.add(i);}}if(n.healthcheck){let a=t.plan.serviceEnvOverrides?.[o.id];if(o.id==="postgres"&&a){let i=Ap(a).map(c=>JSON.stringify(c)).join(", ");e.push("    healthcheck:"),e.push(`      test: [${i}]`),e.push(`      interval: ${n.healthcheck.interval}`),e.push(`      timeout: ${n.healthcheck.timeout}`),e.push(`      retries: ${n.healthcheck.retries}`);}else e.push(_m(n.healthcheck,"    "));}e.push("    restart: unless-stopped");}}if(r.size>0){e.push("volumes:");for(let o of [...r].sort())e.push(`  ${o}:`),e.push("    driver: local");}return e.push(""),e.join(`
+`)}function Nm(t,e,r){return t.kind==="override"?t.value===e:t.kind==="module"?r.moduleMappings[t.value]?.includes(e)??false:r.envVarMappings[t.value.toUpperCase()]?.includes(e)??false}function $m(t){let e=new Map,r=[];for(let o of t)for(let n of o.ports){let a=e.get(n.host);a&&a!==o.id?r.push(`Port collision on host ${n.host} between services '${a}' and '${o.id}'`):e.set(n.host,o.id);}return r}async function Tm(t){let e=t$1(t,"workspace.json").find(r=>existsSync(r));if(e)try{let r=await M__default.readJson(e);return r.workspace_name||r.name}catch{return}}async function Ja(t$1){let e=b.resolve(t$1.workspacePath),r=Kt(),o=await bp({workspacePath:e,contract:r}),n=o.serviceIds.map(g=>{let j=r.services[g];return j?{id:g,displayName:j.displayName,category:j.category,image:j.image,ports:j.ports,sources:o.sources.filter(y=>Nm(y,g,r))}:null}).filter(g=>g!==null),a=$m(n);n.length===0&&a.push("No infrastructure services detected. Install modules with infra dependencies or add .workspai/infra/overrides.json");for(let g of o.overrides)r.services[g]||a.push(`Override references unknown service '${g}'`);let i=await g$1(e,t.workspaceContract)?t.workspaceContract:void 0,c=Pp(r,o.serviceIds),l=await Cp({workspacePath:e,contract:r}),p={...c,...l};l.RAPIDKIT_DB_POSTGRES_URL&&(p.DATABASE_URL=l.RAPIDKIT_DB_POSTGRES_URL);let f={},u=Ep(p);return u&&o.serviceIds.includes("postgres")&&(f.postgres=u),{schemaVersion:kp,generatedAt:(t$1.now||(()=>new Date))().toISOString(),workspacePath:e,workspaceName:await Tm(e),contractPath:i,strategy:"sidecar",composePath:jr,envExamplePath:Ga,services:n,connectionEnv:p,serviceEnvOverrides:Object.keys(f).length>0?f:void 0,sources:{modules:o.modules,envVars:o.envVars,overrides:o.overrides},warnings:a}}async function Ka(t){let e=b.resolve(t.workspacePath),r=b.join(e,jr),o=b.join(e,Cr),n=b.join(e,Ga),a=Kt();a$4(t.plan,"contracts/infra-plan.v1.json","Workspai infrastructure plan");let i=xp({plan:t.plan,contract:a,workspaceName:t.plan.workspaceName||b.basename(e)}),c=["# Generated by: npx workspai infra plan","# Copy values into project .env files as needed.",...Object.entries(t.plan.connectionEnv).map(([l,p])=>`${l}=${p}`),""].join(`
+`);return t.dryRun?{composePath:r,planPath:o,envExamplePath:n}:(await M__default.ensureDir(b.dirname(r)),await M__default.ensureDir(b.dirname(o)),await M__default.writeFile(r,i,"utf-8"),await M__default.writeFile(o,`${JSON.stringify(t.plan,null,2)}
+`,"utf-8"),await M__default.writeFile(n,c,"utf-8"),{composePath:r,planPath:o,envExamplePath:n})}function Mm(t){return b.resolve(t).split(b.sep).join("/")}async function _p(){if((await execa("docker",["compose","version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker",prefixArgs:["compose"]};if((await execa("docker-compose",["version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker-compose",prefixArgs:[]};throw new Error("Docker Compose is not available. Install Docker Desktop or the docker-compose plugin, then verify with: docker compose version")}async function Wm(){if((await execa("docker",["version"],{reject:false,timeout:5e3})).exitCode!==0)throw new Error("Docker is not available in PATH. Install Docker and ensure the daemon is running before using rapidkit infra.");await _p();}function Op(t){let e=t.toLowerCase();return e.includes("no space left on device")?"Docker failed because the disk is full. Free space with: docker system prune -f (or docker system prune -a --volumes -f).":e.includes("address already in use")||e.includes("bind")?"Docker failed to bind a host port. Stop the conflicting service or adjust ports in contracts/infra-stack.v1.json via .workspai/infra/overrides.json.":e.includes("cannot connect to the docker daemon")?"Docker daemon is not running. Start Docker Desktop or the docker service, then retry.":null}async function Np(t){await Wm();let e=await _p(),r=Mm(t.composePath),o=await execa(e.command,[...e.prefixArgs,"-f",r,...t.args],{cwd:t.workspacePath,reject:false});return {exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr}}function un(t){let e=t?b.resolve(t):$a(process.cwd())??b$5({startPath:process.cwd()})?.workspacePath??null;if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");return a$9(e)}function Dm(t){return b.join(t,jr)}async function Ha(t){let e=b.join(t,Cr);if(!await M__default.pathExists(e))throw new Error(`Infra plan not found at ${Cr}. Run: npx workspai infra plan`);let r=await M__default.readJson(e);return a$4(r,"contracts/infra-plan.v1.json",`Infra plan ${e}`),r}async function Ba(t){let e=Dm(t.workspacePath);if(!await M__default.pathExists(e))throw new Error(`Compose file not found at ${jr}. Run: npx workspai infra plan`);return Np({composePath:e,workspacePath:t.workspacePath,args:t.args})}function Lm(t,e={}){if(console.log(s.bold(`
 Workspai infra plan
-`)),console.log(s.gray(`Workspace: ${t.workspacePath}`)),t.workspaceName&&console.log(s.gray(`Name: ${t.workspaceName}`)),console.log(s.gray(`Strategy: ${t.strategy} (sidecar compose)`)),console.log(s.gray(`Compose: ${t.composePath}`)),console.log(s.gray(`Plan report: ${kr}`)),console.log(s.gray(`Env example: ${t.envExamplePath}`)),console.log(""),t.services.length===0)console.log(s.yellow("No infrastructure services detected."));else {console.log(s.bold("Services:"));for(let r of t.services){let o=r.ports.map(n=>`${n.host}:${n.container}`).join(", ");console.log(s.cyan(`  ${r.id}`),s.gray(`(${r.displayName})`),o?s.white(`ports ${o}`):"");}}if(t.sources.modules.length>0&&(console.log(""),console.log(s.bold("Detected from modules:")),console.log(s.gray(`  ${t.sources.modules.join(", ")}`))),t.sources.envVars.length>0){let r=Kt(),o=wp(t.sources.envVars,r);console.log(s.bold("Detected from env vars (infra-mapped):")),o.length>0?console.log(s.gray(`  ${o.join(", ")}`)):console.log(s.gray("  none"));let n=t.sources.envVars.length-o.length;if(n>0&&!e.verbose)console.log(s.gray(`  (${n} other project env vars scanned \u2014 use --verbose to list all)`));else if(e.verbose){let a=t.sources.envVars.filter(i=>!o.includes(i));a.length>0&&console.log(s.gray(`  Other scanned env vars: ${a.join(", ")}`));}}if(t.sources.overrides.length>0&&(console.log(s.bold("Overrides:")),console.log(s.gray(`  ${t.sources.overrides.join(", ")}`))),Object.keys(t.connectionEnv).length>0){console.log(""),console.log(s.bold("Connection env (preview):"));for(let[r,o]of Object.entries(t.connectionEnv))console.log(s.gray(`  ${r}=${o}`));}if(t.warnings.length>0){console.log(""),console.log(s.yellow("Warnings:"));for(let r of t.warnings)console.log(s.yellow(`  - ${r}`));}console.log("");}function Ep(t){let e=t.command("infra").description("Plan and manage workspace infrastructure (Docker sidecar stack)");e.command("plan").description("Discover infra needs and generate compose plan artifacts").option("--workspace <path>","Workspace root path").option("--json","Print plan as JSON").option("--dry-run","Compute plan without writing artifacts").option("--verbose","Show all scanned project env vars").action(async r=>{try{let o=cn(r.workspace),n=await Ma({workspacePath:o}),a=await Wa({workspacePath:o,plan:n,dryRun:r.dryRun});if(r.json){console.log(JSON.stringify({...n,artifacts:r.dryRun?{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath,dryRun:true}:{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath}},null,2));return}Am(n,{verbose:r.verbose}),r.dryRun?console.log(s.yellow(`Dry run \u2014 no files written.
+`)),console.log(s.gray(`Workspace: ${t.workspacePath}`)),t.workspaceName&&console.log(s.gray(`Name: ${t.workspaceName}`)),console.log(s.gray(`Strategy: ${t.strategy} (sidecar compose)`)),console.log(s.gray(`Compose: ${t.composePath}`)),console.log(s.gray(`Plan report: ${Cr}`)),console.log(s.gray(`Env example: ${t.envExamplePath}`)),console.log(""),t.services.length===0)console.log(s.yellow("No infrastructure services detected."));else {console.log(s.bold("Services:"));for(let r of t.services){let o=r.ports.map(n=>`${n.host}:${n.container}`).join(", ");console.log(s.cyan(`  ${r.id}`),s.gray(`(${r.displayName})`),o?s.white(`ports ${o}`):"");}}if(t.sources.modules.length>0&&(console.log(""),console.log(s.bold("Detected from modules:")),console.log(s.gray(`  ${t.sources.modules.join(", ")}`))),t.sources.envVars.length>0){let r=Kt(),o=Sp(t.sources.envVars,r);console.log(s.bold("Detected from env vars (infra-mapped):")),o.length>0?console.log(s.gray(`  ${o.join(", ")}`)):console.log(s.gray("  none"));let n=t.sources.envVars.length-o.length;if(n>0&&!e.verbose)console.log(s.gray(`  (${n} other project env vars scanned \u2014 use --verbose to list all)`));else if(e.verbose){let a=t.sources.envVars.filter(i=>!o.includes(i));a.length>0&&console.log(s.gray(`  Other scanned env vars: ${a.join(", ")}`));}}if(t.sources.overrides.length>0&&(console.log(s.bold("Overrides:")),console.log(s.gray(`  ${t.sources.overrides.join(", ")}`))),Object.keys(t.connectionEnv).length>0){console.log(""),console.log(s.bold("Connection env (preview):"));for(let[r,o]of Object.entries(t.connectionEnv))console.log(s.gray(`  ${r}=${o}`));}if(t.warnings.length>0){console.log(""),console.log(s.yellow("Warnings:"));for(let r of t.warnings)console.log(s.yellow(`  - ${r}`));}console.log("");}function $p(t){let e=t.command("infra").description("Plan and manage workspace infrastructure (Docker sidecar stack)");e.command("plan").description("Discover infra needs and generate compose plan artifacts").option("--workspace <path>","Workspace root path").option("--json","Print plan as JSON").option("--dry-run","Compute plan without writing artifacts").option("--verbose","Show all scanned project env vars").action(async r=>{try{let o=un(r.workspace),n=await Ja({workspacePath:o}),a=await Ka({workspacePath:o,plan:n,dryRun:r.dryRun});if(r.json){console.log(JSON.stringify({...n,artifacts:r.dryRun?{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath,dryRun:true}:{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath}},null,2));return}Lm(n,{verbose:r.verbose}),r.dryRun?console.log(s.yellow(`Dry run \u2014 no files written.
 `)):(console.log(s.green("Artifacts written:")),console.log(s.gray(`  ${a.composePath}`)),console.log(s.gray(`  ${a.planPath}`)),console.log(s.gray(`  ${a.envExamplePath}
 `)));}catch(o){console.error(s.red(`
 \u274C ${o instanceof Error?o.message:String(o)}
-`)),process.exit(1);}}),e.command("up").description("Start planned infrastructure services via Docker Compose").option("--workspace <path>","Workspace root path").option("--detach","Run containers in background",true).option("--build","Build images before starting").option("--no-plan","Skip refreshing plan artifacts before starting").action(async r=>{try{let o=cn(r.workspace);if(r.plan!==false){let c=await Ma({workspacePath:o});await Wa({workspacePath:o,plan:c});}if((await Da(o)).services.length===0)throw new Error("Infra plan has no services. Run: npx workspai infra plan (from a workspace with .env.example, core modules, or .workspai/infra/overrides.json)");let a=["up"];r.detach!==false&&a.push("-d"),r.build&&a.push("--build");let i=await La({workspacePath:o,args:a});if(i.stdout&&process.stdout.write(i.stdout),i.stderr&&process.stderr.write(i.stderr),i.exitCode!==0){let c=Cp(i.stderr);c&&console.error(s.yellow(`
+`)),process.exit(1);}}),e.command("up").description("Start planned infrastructure services via Docker Compose").option("--workspace <path>","Workspace root path").option("--detach","Run containers in background",true).option("--build","Build images before starting").option("--no-plan","Skip refreshing plan artifacts before starting").action(async r=>{try{let o=un(r.workspace);if(r.plan!==false){let c=await Ja({workspacePath:o});await Ka({workspacePath:o,plan:c});}if((await Ha(o)).services.length===0)throw new Error("Infra plan has no services. Run: npx workspai infra plan (from a workspace with .env.example, core modules, or .workspai/infra/overrides.json)");let a=["up"];r.detach!==false&&a.push("-d"),r.build&&a.push("--build");let i=await Ba({workspacePath:o,args:a});if(i.stdout&&process.stdout.write(i.stdout),i.stderr&&process.stderr.write(i.stderr),i.exitCode!==0){let c=Op(i.stderr);c&&console.error(s.yellow(`
 \u26A0\uFE0F  ${c}
 `)),process.exit(i.exitCode);}r.detach!==false&&(console.log(s.green(`
 \u2705 Infrastructure stack started.
 `)),console.log(s.gray(`Check status: npx workspai infra status
 `)));}catch(o){console.error(s.red(`
 \u274C ${o instanceof Error?o.message:String(o)}
-`)),process.exit(1);}}),e.command("down").description("Stop planned infrastructure services").option("--workspace <path>","Workspace root path").option("--volumes","Remove named volumes").action(async r=>{try{let o=cn(r.workspace);await Da(o);let n=["down"];r.volumes&&n.push("-v");let a=await La({workspacePath:o,args:n});a.stdout&&process.stdout.write(a.stdout),a.stderr&&process.stderr.write(a.stderr),a.exitCode!==0&&process.exit(a.exitCode),console.log(s.green(`
+`)),process.exit(1);}}),e.command("down").description("Stop planned infrastructure services").option("--workspace <path>","Workspace root path").option("--volumes","Remove named volumes").action(async r=>{try{let o=un(r.workspace);await Ha(o);let n=["down"];r.volumes&&n.push("-v");let a=await Ba({workspacePath:o,args:n});a.stdout&&process.stdout.write(a.stdout),a.stderr&&process.stderr.write(a.stderr),a.exitCode!==0&&process.exit(a.exitCode),console.log(s.green(`
 \u2705 Infrastructure stack stopped.
 `));}catch(o){console.error(s.red(`
 \u274C ${o instanceof Error?o.message:String(o)}
-`)),process.exit(1);}}),e.command("status").description("Show Docker Compose status for planned infrastructure").option("--workspace <path>","Workspace root path").option("--json","Print docker compose ps JSON output").option("--strict","Exit non-zero when any container is not healthy/running").action(async r=>{try{let o=cn(r.workspace),n=await Da(o),a=r.json?["ps","--format","json"]:["ps"],i=await La({workspacePath:o,args:a});if(r.json){i.stdout&&process.stdout.write(i.stdout),i.exitCode!==0&&process.exit(i.exitCode);return}console.log(s.bold(`
+`)),process.exit(1);}}),e.command("status").description("Show Docker Compose status for planned infrastructure").option("--workspace <path>","Workspace root path").option("--json","Print docker compose ps JSON output").option("--strict","Exit non-zero when any container is not healthy/running").action(async r=>{try{let o=un(r.workspace),n=await Ha(o),a=r.json?["ps","--format","json"]:["ps"],i=await Ba({workspacePath:o,args:a});if(r.json){i.stdout&&process.stdout.write(i.stdout),i.exitCode!==0&&process.exit(i.exitCode);return}console.log(s.bold(`
 Workspai infra status
 `)),console.log(s.gray(`Workspace: ${o}`)),console.log(s.gray(`Planned services: ${n.services.map(c=>c.id).join(", ")||"none"}`)),console.log(""),i.stdout.trim()?process.stdout.write(i.stdout):(console.log(s.yellow("No running containers found for the infra stack.")),console.log(s.gray(`Start with: npx workspai infra up
 `))),i.exitCode!==0&&(i.stderr&&process.stderr.write(i.stderr),process.exit(i.exitCode)),r.strict&&/Restarting|Exit|unhealthy/i.test(i.stdout)&&(console.log(""),console.log(s.red("One or more infra containers are not healthy.")),console.log(s.gray(`Inspect logs with: docker logs workspai-postgres (or redis/mailpit)
 `)),process.exit(1));}catch(o){console.error(s.red(`
 \u274C ${o instanceof Error?o.message:String(o)}
-`)),process.exit(1);}});}function Rm(t){return t.strict&&t.state==="blocked"?2:void 0}function Ze(t){let e=b$4({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:!t.workspace});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return P.resolve(e.workspacePath)}async function Va(t){let e=P.resolve(process.cwd(),t);if(!await M__default.pathExists(e))throw new Error(`JSON input does not exist: ${t}`);return M__default.readJson(e)}function xm(t,e){if(e){console.log(JSON.stringify(t,null,2));return}let r=t.capsule.status==="sealed",o=t.capsule.status==="blocked",n=r?s.green("\u2713"):o?s.red("\u25A0"):s.cyan("\u25C6");console.log(`${n} Proof-Carrying Change \xB7 ${t.capsule.status}`),console.log(s.bold(`   ${t.changeId}`)),console.log(s.gray(`   State: ${t.state}`)),console.log(s.gray(`   Assurance: ${t.capsule.assurances.filter(a=>a.status==="passed").length}/${t.capsule.assurances.length} passed`)),t.capsule.remainingUncertainty.length>0&&console.log(s.yellow(`   Uncertainty: ${t.capsule.remainingUncertainty.join(" ")}`)),console.log(s.gray(`   Capsule: ${t.artifacts.capsule}`));for(let a of t.nextActions)console.log(s.gray(`   Next: ${a}`));}async function Pt(t,e,r){try{let o=await e();xm(o,t.json);let n=r?.(o);n!==void 0&&(process.exitCode=n);}catch(o){let n=o instanceof Error?o.message:String(o);t.json?console.log(JSON.stringify({schemaVersion:"workspai.change-error.v1",status:"error",message:n},null,2)):console.error(s.red(`Proof-Carrying Change failed: ${n}`)),process.exitCode=1;}}var _m=new Set(["filesystem","command","configuration","dependency","external"]);function Im(t){let e=[...new Set(t.split(",").map(r=>r.trim()).filter(Boolean))];for(let r of e)if(!_m.has(r))throw new Error(`Unsupported effect class: ${r}`);return e}function et(t){return t.option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit a versioned machine-readable result")}function xp(t){let e=t.command("change").description("Create and verify tamper-evident, architecture-aware change capsules");et(e.command("begin").description("Pin an active Goal and architecture baseline")).option("--goal <goal-id>","Require this Goal Pack to be the active Goal").action(async a=>{await Pt(a,()=>c$8({workspacePath:Ze(a),goalId:a.goal}));}),et(e.command("list").description("List discoverable change capsules and integrity")).action(async a=>{try{let i=await m({workspacePath:Ze(a)});if(a.json){console.log(JSON.stringify(i,null,2));return}console.log(s.bold(`Proof-Carrying Changes \xB7 ${i.summary.total}`)),i.changes.length===0&&console.log(s.gray("  No changes recorded."));for(let c of i.changes){let l=c.valid?c.status==="sealed"?s.green("\u2713"):s.cyan("\u25C6"):s.red("\u25A0");console.log(`${l} ${c.changeId} \xB7 ${c.status} \xB7 ${c.assurance.passed}/${c.assurance.total}`);}}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(s.red(c)),process.exitCode=1;}}),et(e.command("predict").description("Attach a noncanonical architecture prediction")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <prediction.json>","Typed predicted architecture change JSON").action(async a=>{await Pt(a,async()=>d$9({workspacePath:Ze(a),changeId:a.change,prediction:q$4(await Va(a.file))}));}),et(e.command("authorize").description("Grant bounded effect capabilities")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--effects <classes>","Comma-separated filesystem,command,configuration,dependency,external classes").option("--granted-by <identity>","Human or policy identity granting authorization","operator").action(async a=>{await Pt(a,()=>f$2({workspacePath:Ze(a),changeId:a.change,effectClasses:Im(a.effects),grantedBy:a.grantedBy}));}),et(e.command("resume").description("Resume a blocked transaction with human intent")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--to <state>","Resume target: authorized, executing, or verifying").requiredOption("--reason <text>","Durable reason for resuming").option("--actor <identity>","Human identity resuming the change","operator").action(async a=>{await Pt(a,()=>{if(!["authorized","executing","verifying"].includes(a.to))throw new Error("--to must be authorized, executing, or verifying.");return g$b({workspacePath:Ze(a),changeId:a.change,resumeTo:a.to,reason:a.reason,actorId:a.actor})});});let r=e.command("effect").description("Record typed observed effects");et(r.command("record").description("Append an idempotent effect receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed effect receipt JSON").action(async a=>{await Pt(a,async()=>h$6({workspacePath:Ze(a),changeId:a.change,receipt:r$5(await Va(a.file))}));});let o=e.command("verification").description("Record independent Goal-criterion verification");et(o.command("record").description("Append an exact-generation verification receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed verification receipt JSON").action(async a=>{await Pt(a,async()=>i$5({workspacePath:Ze(a),changeId:a.change,receipt:s$5(await Va(a.file))}));}),et(e.command("status").description("Inspect the derived transaction and assurance state")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{await Pt(a,()=>l$8({workspacePath:Ze(a),changeId:a.change,operation:"status"}));}),et(e.command("explain").description("Explain proof, uncertainty, and next actions")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{await Pt(a,()=>l$8({workspacePath:Ze(a),changeId:a.change,operation:"explain"}));}),et(e.command("verify").description("Re-observe architecture and verify exact effects")).requiredOption("--change <change-id>","Proof-carrying change id").option("--strict","Treat advisory Workspace Verify findings as blockers").option("--no-refresh","Use current canonical intelligence without refreshing it").action(async a=>{await Pt(a,()=>k$6({workspacePath:Ze(a),changeId:a.change,strict:a.strict,refresh:a.refresh}),i=>Rm({strict:a.strict===true,state:i.state}));}),et(e.command("abort").description("Terminate an open change without deleting evidence")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--reason <text>","Durable reason for aborting the change").option("--actor <identity>","Human identity aborting the change","operator").action(async a=>{await Pt(a,()=>n$3({workspacePath:Ze(a),changeId:a.change,reason:a.reason,actorId:a.actor}));});let n=e.command("capsule").description("Validate or export a change capsule");et(n.command("validate").description("Validate capsule and referenced local evidence")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{try{let i=await o$1({workspacePath:Ze(a),changeId:a.change});a.json?console.log(JSON.stringify(i,null,2)):console.log(i.valid?s.green(`\u2713 Capsule ${a.change} is valid.`):s.red(`\u25A0 Capsule ${a.change} is invalid: ${i.errors.join("; ")}`)),i.valid||(process.exitCode=1);}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({valid:false,errors:[c]},null,2)):console.error(s.red(c)),process.exitCode=1;}}),et(n.command("export").description("Export a validated portable capsule manifest")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--output <path>","Workspace-contained export path").action(async a=>{try{let i=await p$1({workspacePath:Ze(a),changeId:a.change,outputPath:a.output});a.json?console.log(JSON.stringify(i,null,2)):console.log(s.green(`\u2713 Capsule exported: ${i.outputPath}`));}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(s.red(c)),process.exitCode=1;}});}var Ja="agent-framework-change-plan",Mm="workspai.agent-framework-managed-file.v1",_p=1024*1024;function $t(t){return t.replaceAll("\\","/").replace(/^\.\//,"").replace(/\/$/,"")}function Op(t,e){let r=$t(t);return r==="."||r===""?$t(e):`${r}/${$t(e)}`}function Ka(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,48)||"project",r=createHash("sha256").update(t).digest("hex").slice(0,12);return `${e}-${r}`}function Ua(t){return createHash("sha256").update(`${JSON.stringify(t.manifest)}
-`).digest("hex")}function Np(t){let e=t.registry.resolveAdapter(t.adapterId);if(e.status!=="admitted"||!e.entry){let o=e.blockers.length>0?` ${e.blockers.join(" ")}`:"";throw new Error(`Agent framework adapter is not admitted: ${t.adapterId}.${o}`)}let r=E$1.find(o=>o.manifest.adapter.id===e.entry?.manifest.adapter.id);if(!r||Ua(r)!==e.entry.manifestSha256)throw new Error(`Admitted adapter implementation does not match its registry manifest: ${t.adapterId}`);return r}function Wm(t){return `.workspai/agent-frameworks/ownership/${Ka(t.adapterId)}/${Ka(t.projectName)}/${D$1(t.instanceName)}.json`}async function $p(t,e){let r=P.resolve(t),o=await b$o(r,m$8);if(!o)throw new Error("Workspace Model is missing; run Workspace Intelligence before planning an agent framework change.");let n=await M__default.readJson(o),a=n.projects.filter(p=>p.name===e||$t(p.path)===$t(e));if(a.length!==1)throw new Error(a.length===0?`Project is not present in the canonical Workspace Model: ${e}`:`Project target is ambiguous in the canonical Workspace Model: ${e}`);let i=a[0],c=k$5(r,i);if(!(await M__default.stat(c).catch(()=>null))?.isDirectory())throw new Error(`Canonical project root is unavailable: ${i.name}`);return {workspacePath:r,workspaceName:n.workspace.name,projectName:i.name,projectRoot:c,artifactPrefix:$t(i.path)}}async function Ha(t,e){let r=P.resolve(t),o=P.resolve(r,e),n=P.relative(r,o);if(!n||n===".."||n.startsWith(`..${P.sep}`)||P.isAbsolute(n))throw new Error(`Managed path escapes the canonical project root: ${e}`);let a=await M__default.realpath(r),i=o;for(;!await M__default.pathExists(i);){let p=P.dirname(i);if(p===i)throw new Error(`Cannot resolve managed path: ${e}`);i=p;}let c=await M__default.realpath(i),l=P.relative(a,c);if(l===".."||l.startsWith(`..${P.sep}`)||P.isAbsolute(l))throw new Error(`Managed path resolves through a symlink outside the project root: ${e}`);if(await M__default.pathExists(o)){let p=await M__default.lstat(o);if(!p.isFile()||p.isSymbolicLink())throw new Error(`Managed target is not a regular file: ${e}`)}return o}async function Dm(t,e,r){let o=e.render({projectRoot:t.projectRoot,instanceName:r}).files,n=new Map;for(let a of o){let i=await Ha(t.projectRoot,a.path),c=await M__default.stat(i).catch(()=>null);if(c){if(c.size>_p)throw new Error(`Managed file exceeds the ${_p} byte safety limit: ${a.path}`);n.set(a.path,await M__default.readFile(i,"utf8"));}}return n}async function Lm(t){let e=Wm({adapterId:t.adapter.manifest.adapter.id,projectName:t.target.projectName,instanceName:t.instanceName}),r=await b$o(t.target.workspacePath,e);if(!r)return {path:e,ledger:new Map};let o=await M__default.readJson(r);if(a$4(o,C$1,"Agent framework ownership receipt"),o.schemaVersion!==z||o.adapter?.id!==t.adapter.manifest.adapter.id||o.adapter.version!==t.adapter.manifest.adapter.version||o.adapter.manifestSha256!==Ua(t.adapter)||o.framework?.id!==t.adapter.manifest.framework.id||!t.adapter.manifest.framework.testedVersions.includes(o.framework.version)||o.target?.workspace!==t.target.workspaceName||o.target?.project!==t.target.projectName||$t(o.target.artifactPrefix)!==t.target.artifactPrefix||o.target.instanceName!==D$1(t.instanceName)||!Array.isArray(o.files))throw new Error(`Agent framework ownership receipt is incompatible or corrupt: ${e}`);let n=new Map;for(let a of o.files){if(!a||typeof a.path!="string"||!/^[a-f0-9]{64}$/.test(a.sha256))throw new Error(`Agent framework ownership receipt contains an invalid file entry: ${e}`);if(n.has(a.path))throw new Error(`Agent framework ownership receipt contains duplicate paths: ${e}`);n.set(a.path,a.sha256);}return {path:e,ledger:n}}async function Tp(t){let[e,r]=await Promise.all([Dm(t.target,t.adapter,t.instanceName),Lm(t)]);return {input:{projectRoot:t.target.projectRoot,instanceName:t.instanceName,target:{project:t.target.projectName,artifactPrefix:t.target.artifactPrefix},existingFiles:e,ownershipLedger:r.ledger},receiptPath:r.path}}async function Mp(t){let e=Np(t),r=await $p(t.workspacePath,t.project),o=await Tp({target:r,adapter:e,instanceName:t.instanceName}),n=e.plan(t.mode,o.input);a$4(n,B,"Agent framework change plan");let a=c$h(n);if(n.status!=="planned")return {status:n.status,changeId:t.changeId,project:r.projectName,plan:n,planArtifact:null,planDigest:a};await d$9({workspacePath:r.workspacePath,changeId:t.changeId,actorKind:"cli",actorId:"workspai-agent-framework",prediction:{schemaVersion:i$2,changeId:t.changeId,goalId:"",generatedAt:new Date().toISOString(),baselineGeneration:"",nonCanonical:true,proofEligible:false,operations:n.files.map(c=>({operation:"change",targetKind:"artifact",targetId:Op(r.artifactPrefix,c.path),rationale:`${c.overwrite} under the admitted agent-framework plan.`,confidence:"high"})),assumptions:["Only hash-bound Workspai-managed files in the admitted ownership roots will change."],predictedRisk:n.files.length>0?"low":"none"}});let i=await e$d({workspacePath:r.workspacePath,changeId:t.changeId,role:Ja,schemaVersion:y,contractPath:B,payload:n,actorId:"workspai-agent-framework"});return {status:"planned",changeId:t.changeId,project:r.projectName,plan:n,planArtifact:i.artifact,planDigest:i.digest}}async function Fm(t,e){let o=(await a$Q(t,e)).transaction.plans.filter(c=>c.role===Ja);if(o.length!==1)throw new Error(`PCC transaction must contain exactly one ${Ja} reference.`);let n=o[0],a=await b$o(t,n.artifact);if(!a)throw new Error(`Attached agent framework plan is missing: ${n.artifact}`);let i=await M__default.readJson(a);if(a$4(i,B,"Attached agent framework change plan"),c$h(i)!==n.digest.value)throw new Error("Attached agent framework plan digest does not match the PCC event chain.");return i}function Gm(t){let{transaction:e}=t;if(e.state!=="authorized"&&e.state!=="executing")throw new Error(`Agent framework apply requires an authorized PCC transaction; observed ${e.state}.`);if(!e.authorization?.effectClasses.includes("filesystem"))throw new Error("Agent framework apply requires an explicit filesystem effect grant.");if(!e.scope?.projects.includes(t.projectName))throw new Error(`Project ${t.projectName} is outside the immutable PCC scope.`)}function Vm(t,e){return {role:"agent-framework-managed-file",artifact:t,schemaVersion:Mm,digest:{algorithm:"sha256",semantics:"raw-bytes-v1",value:e}}}async function Jm(t,e){await M__default.ensureDir(P.dirname(t));let r=`${t}.${process.pid}.${randomUUID()}.workspai-tmp`;try{await M__default.writeFile(r,e,{encoding:"utf8",flag:"wx"});try{await M__default.rename(r,t);}catch(o){let n=o.code;if(n!=="EEXIST"&&n!=="EPERM")throw o;await M__default.move(r,t,{overwrite:true});}}finally{await M__default.remove(r).catch(()=>{});}}async function Ba(t){let e=Np(t),r=await $p(t.workspacePath,t.project),o=P.join(r.workspacePath,".workspai","locks","agent-framework",Ka(`${r.projectName}:${e.manifest.adapter.id}`));return a$P(o,async()=>{let[n,a]=await Promise.all([a$Q(r.workspacePath,t.changeId),Fm(r.workspacePath,t.changeId)]);if(Gm({transaction:n.transaction,projectName:r.projectName}),a.status!=="planned"||a.adapterId!==e.manifest.adapter.id||a.adapterVersion!==e.manifest.adapter.version)throw new Error("Attached plan is not executable by the selected adapter version.");if(a.target.project!==r.projectName||$t(a.target.artifactPrefix)!==r.artifactPrefix)throw new Error("Attached plan target does not match the canonical Workspace Model project.");let i=await Tp({target:r,adapter:e,instanceName:a.instanceName}),c=e.plan(a.mode,i.input);if(c$h(c)!==c$h(a))throw new Error("Agent framework plan is stale; project files or ownership evidence changed after authorization.");let l=e.render(i.input);if(l.conflicts.length>0)throw new Error("Adapter render became blocked after authorization.");let p=new Map(a.files.map(k=>[k.path,k]));if(l.files.length!==p.size||l.files.some(k=>{let S=p.get(k.path);return !S||S.sha256!==k.sha256||S.overwrite!==k.overwrite}))throw new Error("Rendered files do not match the hash-bound PCC plan.");let g=new Map,u=[],f=await b$o(r.workspacePath,i.receiptPath),b=f?await M__default.readFile(f):null;try{for(let E of l.files){let d=await Ha(r.projectRoot,E.path);g.set(E.path,await M__default.pathExists(d)?await M__default.readFile(d):null),await Jm(d,E.content),u.push({path:E.path,artifact:Op(r.artifactPrefix,E.path),sha256:E.sha256});}let k=e.render({projectRoot:r.projectRoot,instanceName:a.instanceName,target:a.target}).files,S={schemaVersion:z,generatedAt:new Date().toISOString(),changeId:t.changeId,adapter:{id:e.manifest.adapter.id,version:e.manifest.adapter.version,manifestSha256:Ua(e)},framework:{id:e.manifest.framework.id,version:a.frameworkVersion},target:{workspace:r.workspaceName,project:r.projectName,artifactPrefix:r.artifactPrefix,instanceName:a.instanceName},files:k.map(E=>({path:E.path,sha256:E.sha256}))};a$4(S,C$1,"Agent framework ownership receipt"),await h$5(r.workspacePath,i.receiptPath,S);let A={role:"agent-framework-ownership-receipt",artifact:i.receiptPath,schemaVersion:z,digest:{algorithm:"sha256",semantics:"canonical-json-v1",value:c$h(S)}};return await h$6({workspacePath:r.workspacePath,changeId:t.changeId,actorKind:"cli",actorId:"workspai-agent-framework",receipt:{id:`agent-framework-${t.changeId}`,effectClass:"filesystem",status:"succeeded",summary:`Applied ${e.manifest.framework.name} instance ${a.instanceName}.`,artifacts:[...u.map(E=>Vm(E.artifact,E.sha256)),A],observedAt:S.generatedAt,idempotencyKey:`agent-framework:${t.changeId}:${c$h(a)}`}}),{status:"applied",changeId:t.changeId,project:r.projectName,adapterId:e.manifest.adapter.id,instanceName:a.instanceName,files:u,ownershipReceipt:i.receiptPath}}catch(k){for(let[S,A]of [...g].reverse()){let E=await Ha(r.projectRoot,S);A===null?await M__default.remove(E):await M__default.outputFile(E,A);}if(b===null){let S=await b$o(r.workspacePath,i.receiptPath);S&&await M__default.remove(S);}else await M__default.outputFile(P.join(r.workspacePath,i.receiptPath),b);throw k}},{purpose:`agent-framework:${r.projectName}:${e.manifest.adapter.id}`,timeoutMs:3e4,staleMs:6e4})}var Km=["python","dotnet"];function Wp(t){return `microsoft-agent-framework-${t}`}function qa(t){let e=t.trim().toLowerCase();if(!Km.includes(e))throw new Error(`Unsupported agent framework runtime: ${t}. Choose python or dotnet.`);return e}async function eo(t){let e=F({},{trustReviewedReleaseAdmissions:true}),r=Wp(t.runtime),o=D$1(t.instanceName),n=e.resolveAdapter(r);if(n.status!=="admitted"||!n.entry)throw new Error(`Agent framework adapter ${r} is not release-admitted. ${n.blockers.join(" ")}`);let a=t.goalId,i=!a;if(!a){let l=t.intent?.trim()||`Attach a governed Microsoft Agent Framework ${t.runtime} agent named ${o} to ${t.project}`,p=await a$j({startPath:t.workspacePath,workspacePath:t.workspacePath,intent:l,scope:`project:${t.project}`,consumer:"generic"});if(p.result!=="planned"||p.goalPack.state!=="ready-to-plan")throw new Error(`The attachment Goal is not ready (${p.goalPack.state}). Resolve its bounded evidence or pass an existing ready Goal with --goal.`);a=p.goalPack.id;}let c=await c$8({workspacePath:t.workspacePath,goalId:a,actorKind:"cli",actorId:"workspai-agent-framework"});try{let l=await Mp({workspacePath:t.workspacePath,project:t.project,changeId:c.changeId,registry:e,adapterId:r,instanceName:o,mode:t.mode??"attach"});return l.status!=="planned"&&(await n$3({workspacePath:t.workspacePath,changeId:c.changeId,reason:`Agent framework planning completed as ${l.status}; no mutation is authorized.`,actorId:"workspai-agent-framework"}),i&&await m$4({workspacePath:t.workspacePath,goalId:a,action:"cancel"})),{schemaVersion:"workspai.agent-framework-attachment.v1",operation:"plan",mode:t.mode??"attach",status:l.status,workspacePath:t.workspacePath,project:l.project,runtime:t.runtime,adapterId:r,frameworkVersion:l.plan.frameworkVersion,instanceName:l.plan.instanceName,goalId:a,changeId:l.changeId,planArtifact:l.planArtifact,files:l.plan.files,requiredEnvironment:l.plan.requiredEnvironment,permissions:l.plan.permissions,blockers:l.plan.blockers,nextActions:l.status==="planned"?[`workspai agent framework apply --project ${JSON.stringify(l.project)} --runtime ${t.runtime} --change ${l.changeId}`]:[]}}catch(l){throw await n$3({workspacePath:t.workspacePath,changeId:c.changeId,reason:`Agent framework planning failed: ${l instanceof Error?l.message:String(l)}`,actorId:"workspai-agent-framework"}).catch(()=>{}),i&&a&&await m$4({workspacePath:t.workspacePath,goalId:a,action:"cancel"}).catch(()=>{}),l}}async function ln(t){if(t.prepared.status!=="planned")throw new Error("Only a planned agent framework attachment can be applied.");let e=t.grantedBy.trim();if(!e)throw new Error("The authorization identity cannot be empty.");let r=F({},{trustReviewedReleaseAdmissions:true});await f$2({workspacePath:t.prepared.workspacePath,changeId:t.prepared.changeId,effectClasses:["filesystem"],grantedBy:e,actorKind:"human"});let o;try{o=await Ba({workspacePath:t.prepared.workspacePath,project:t.prepared.project,changeId:t.prepared.changeId,registry:r,adapterId:t.prepared.adapterId});}catch(n){throw await n$3({workspacePath:t.prepared.workspacePath,changeId:t.prepared.changeId,reason:`Agent framework apply failed: ${n instanceof Error?n.message:String(n)}`,actorId:"workspai-agent-framework"}).catch(()=>{}),n}return {...t.prepared,operation:t.prepared.mode,status:"applied",files:o.files.map(n=>({path:n.path,sha256:n.sha256,overwrite:"applied"})),ownershipReceipt:o.ownershipReceipt,nextActions:[`workspai workspace intelligence run --workspace ${JSON.stringify(t.prepared.workspacePath)} --for-agent generic --strict --json`,`workspai change verify --workspace ${JSON.stringify(t.prepared.workspacePath)} --change ${t.prepared.changeId} --json`]}}async function Dp(t){let e=F({},{trustReviewedReleaseAdmissions:true}),r=Wp(t.runtime),o=await Ba({workspacePath:t.workspacePath,project:t.project,changeId:t.changeId,registry:e,adapterId:r});return {schemaVersion:"workspai.agent-framework-attachment.v1",operation:"apply",status:"applied",project:o.project,runtime:t.runtime,adapterId:r,changeId:o.changeId,files:o.files,ownershipReceipt:o.ownershipReceipt,nextActions:[`workspai workspace intelligence run --workspace ${JSON.stringify(t.workspacePath)} --for-agent generic --strict --json`,`workspai change verify --workspace ${JSON.stringify(t.workspacePath)} --change ${t.changeId} --json`]}}function za(t){let e=b$4({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:!t.workspace});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return P.resolve(e.workspacePath)}async function Lp(t,e,r){let o=await a$i(t);if(o.status==="miss")throw new Error(`Canonical Workspace Model and Graph are required (${o.reason}). Run workspai workspace intelligence run --for-agent generic --strict --json.`);let n=o.model.projects.map(i=>({name:i.name,path:i.path,runtime:i.runtime})).sort((i,c)=>i.name.localeCompare(c.name));if(e){let i=n.filter(c=>c.name===e||c.path===e);if(i.length!==1)throw new Error(i.length===0?`Project is not present in the canonical Workspace Model: ${e}`:`Project target is ambiguous: ${e}`);return i[0].name}if(n.length===1)return n[0].name;if(!r)throw new Error("--project is required when the workspace has multiple projects.");return (await b([{type:"rawlist",name:"project",message:"Which project should own this agent?",choices:n.map(i=>({value:i.name,label:i.name,hint:`${i.runtime} \xB7 ${i.path}`}))}])).project}async function Fp(t,e){if(t)return qa(t);if(!e)throw new Error("--runtime is required. Choose python or dotnet.");return (await b([{type:"rawlist",name:"runtime",message:"Choose the agent runtime:",choices:[{value:"python",label:"Python",hint:"Python 3.10+ \xB7 tested baseline"},{value:"dotnet",label:".NET",hint:".NET 8+ \xB7 tested baseline"}]}])).runtime}async function Gp(t,e){if(t?.trim())return t.trim();if(!e)throw new Error("--name is required.");return (await b([{type:"input",name:"instanceName",message:"Name this agent:",default:"workspace-agent",validate:o=>o.trim().length>0||"Agent name is required"}])).instanceName.trim()}function Ya(t){let e=t.status==="planned"?s.cyan:t.status==="no-op"?s.green:s.red;console.log(e(`\u25C6 Microsoft Agent Framework \xB7 ${t.status}`)),console.log(s.bold(`   ${t.instanceName} \xB7 ${t.runtime} \xB7 ${t.project}`)),console.log(s.gray(`   Framework: ${t.frameworkVersion}`)),console.log(s.gray(`   Goal: ${t.goalId}`)),console.log(s.gray(`   Change: ${t.changeId}`));for(let r of t.files)console.log(s.gray(`   ${r.overwrite}: ${r.path}`));t.requiredEnvironment.length>0&&console.log(s.gray(`   Secret references: ${t.requiredEnvironment.join(", ")}`)),console.log(s.gray("   Dependency install: not executed"));for(let r of t.blockers)console.log(s.red(`   Blocked: ${r}`));for(let r of t.nextActions)console.log(s.gray(`   Next: ${r}`));}function Vp(t){console.log(s.green("\u2714 Governed agent attached")),console.log(s.bold(`   ${t.runtime} \xB7 ${t.project}`)),console.log(s.gray(`   Change: ${t.changeId}`)),console.log(s.gray(`   Managed files: ${t.files.length}`)),console.log(s.gray(`   Ownership: ${t.ownershipReceipt}`)),console.log(s.gray("   Dependencies and model calls were not executed."));for(let e of t.nextActions)console.log(s.gray(`   Next: ${e}`));}function Xa(t,e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify({schemaVersion:"workspai.agent-framework-operation-error.v1",status:"error",message:r},null,2)):console.error(s.red(`Agent Framework failed: ${r}`)),process.exitCode=1;}function Jp(t){let e=t.command("framework").description("Create and attach release-admitted agent runtimes through Workspai governance");e.command("list").description("List tested framework runtimes and their release-admission state").option("--json","Emit machine-readable JSON").action(o=>{let n=F({},{trustReviewedReleaseAdmissions:true}),a=n.list().map(c=>{let l=n.resolveAdapter(c.manifest.adapter.id);return {id:c.manifest.adapter.id,framework:c.manifest.framework.name,runtime:c.manifest.implementation.runtimes[0],frameworkVersion:c.manifest.framework.testedVersions[0],status:l.status,blockers:l.blockers}}),i={schemaVersion:"workspai.agent-framework-list.v1",adapters:a};if(o.json)console.log(JSON.stringify(i,null,2));else {console.log(s.bold("Agent Framework runtimes"));for(let c of a){let l=c.status==="admitted"?s.green("\u25CF"):s.red("\u25A0");console.log(`${l} ${c.framework} \xB7 ${c.runtime} \xB7 ${c.frameworkVersion} \xB7 ${c.status}`);}}});let r=o=>o.option("--workspace <path>","Explicit canonical workspace path").option("--project <name>","Canonical project name or path").option("--runtime <runtime>","python or dotnet").option("--name <name>","Agent instance name").option("--goal <goal-id>","Reuse an existing ready Goal Pack").option("--intent <text>","Plain-language Goal intent when creating a dedicated Goal").option("--json","Emit machine-readable JSON");r(e.command("plan").description("Create a hash-bound attachment plan without writing project files")).action(async o=>{try{let n=!o.json&&process.stdin.isTTY===true,a=za(o),i=await Lp(a,o.project,n),c=await Fp(o.runtime,n),l=await Gp(o.name,n),p=await eo({workspacePath:a,project:i,runtime:c,instanceName:l,goalId:o.goal,intent:o.intent});o.json?console.log(JSON.stringify(p,null,2)):Ya(p),p.status==="blocked"&&(process.exitCode=2);}catch(n){Xa(o,n);}}),r(e.command("attach").description("Plan, approve, and write one isolated governed agent instance").option("-y, --yes","Approve the displayed filesystem plan without another prompt").option("--granted-by <identity>","Identity recorded in the authorization","operator")).action(async o=>{try{let n=!o.json&&process.stdin.isTTY===true,a=za(o),i=await Lp(a,o.project,n),c=await Fp(o.runtime,n),l=await Gp(o.name,n),p=await eo({workspacePath:a,project:i,runtime:c,instanceName:l,goalId:o.goal,intent:o.intent});if(p.status!=="planned"){o.json?console.log(JSON.stringify(p,null,2)):Ya(p),process.exitCode=p.status==="blocked"?2:0;return}let g=o.yes===true;if(!g&&n&&(Ya(p),g=(await b([{type:"confirm",name:"approved",message:`Write these ${p.files.length} Workspai-managed files?`,default:false}])).approved),!g){o.json?console.log(JSON.stringify(p,null,2)):(console.log(s.yellow("Plan saved; no project files were written.")),console.log(s.gray(`   Change: ${p.changeId}`)));return}let u=await ln({prepared:p,grantedBy:o.grantedBy});o.json?console.log(JSON.stringify(u,null,2)):Vp(u);}catch(n){Xa(o,n);}}),e.command("apply").description("Apply an already authorized hash-bound framework plan").requiredOption("--change <change-id>","Proof-Carrying Change id").requiredOption("--project <name>","Canonical project name or path").requiredOption("--runtime <runtime>","python or dotnet").option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit machine-readable JSON").action(async o=>{try{let n=await Dp({workspacePath:za(o),project:o.project,runtime:qa(o.runtime),changeId:o.change});o.json?console.log(JSON.stringify(n,null,2)):Vp(n);}catch(n){Xa(o,n);}});}var dn=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,r,o=3){let n=[],a=[{dir:e,depth:0}],i=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;a.length>0;){let c=a.shift();if(!c||c.depth>o)continue;let l=[];try{l=O.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let p of l){let g=P.join(c.dir,p.name);if(p.isDirectory()){i.has(p.name)||a.push({dir:g,depth:c.depth+1});continue}p.name.toLowerCase().endsWith(r.toLowerCase())&&n.push(g);}}return n.sort()}findProjectFile(e){let r=this.findFilesBySuffix(e,".csproj");return r.find(o=>!o.toLowerCase().includes(".tests.csproj"))||r[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(o=>o.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let r=await this.ensureDotnetInstalled(e);return r||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=await this.run("dotnet",o?["restore",o]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=o?["watch","--project",o,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",o?["test",o]:["test"],e)}async runBuild(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["build",o,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["run","--project",o]:["run"],e)}async runLint(e){if(!b$2()&&w$3(e,"lint"))return this.run("make",["lint"],e);let r=P.join(e,"Directory.Build.props");if(O.existsSync(r)&&O.readFileSync(r,"utf-8").includes("EnforceCodeStyleInBuild")){let o=await this.ensureDotnetInstalled(e);if(o)return o;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$2()&&w$3(e,"format"))return this.run("make",["format"],e);let r=await this.ensureDotnetInstalled(e);return r||(O.existsSync(P.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var un=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(e){let r=e;for(;;){if(O.existsSync(P.join(r,".workspai-workspace"))||O.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>O.existsSync(a));if(!n)return "isolated";try{let c=O.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","go"):P.join(e,".workspai","cache","go"),i=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=P.join(a,"mod"),process.env.GOCACHE=P.join(a,"build"),r().finally(()=>{typeof i>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=i,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&O.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&O.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let r=await this.ensureGoInstalled(e);if(r)return r;let o=P.join(e,"Makefile");if(!b$2()&&O.existsSync(o)&&w$3(e,"run"))return this.run("make",["run"],e);let n=v$3(e);return n?this.run("go",["run",n],e):{exitCode:1,message:"No unambiguous Go run target was detected. Add a root main package, keep one cmd/<name>/main.go target, or declare a Makefile run target."}})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let o=(b$2()?[P.join(e,"server.exe"),P.join(e,"server")]:[P.join(e,"server")]).find(i=>O.existsSync(i));if(o)return this.run(o,[],e);let n=await this.ensureGoInstalled(e);if(n)return n;let a=v$3(e);return a?this.run("go",["run",a],e):{exitCode:1,message:"No unambiguous Go start target was detected. Add a root main package, keep one cmd/<name>/main.go target, declare a Makefile run target, or provide the built server binary."}})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$2()&&w$3(e,"lint")?this.run("make",["lint"],e):O.existsSync(P.join(e,".golangci.yml"))||O.existsSync(P.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$2()&&w$3(e,"fmt")?this.run("make",["fmt"],e):!b$2()&&w$3(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var mn=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return  true;try{return (O.statSync(e).mode&73)!==0}catch{return  false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return  true;try{return O.chmodSync(e,493),this.isExecutable(e)}catch{return  false}}resolveJavaCommand(e){let r=process.env.JAVA_HOME?.trim();if(!r)return "java";let o=P.join(r,"bin",process.platform==="win32"?"java.exe":"java");return O.existsSync(o)?o:"java"}parseMajorJavaVersion(e){if(!e)return null;let o=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(o,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let r=P.join(e,"pom.xml");if(!O.existsSync(r))return 21;try{let n=O.readFileSync(r,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,r){try{let o=await execa(e,["-version"],{cwd:r,timeout:5e3,reject:false});if(o.exitCode!==0)return null;let n=`${o.stdout||""}
+`)),process.exit(1);}});}function Fm(t){return t.strict&&t.state==="blocked"?2:void 0}function tt(t){let e=b$5({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:!t.workspace});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return b.resolve(e.workspacePath)}async function za(t){let e=b.resolve(process.cwd(),t);if(!await M__default.pathExists(e))throw new Error(`JSON input does not exist: ${t}`);return M__default.readJson(e)}function Gm(t,e){if(e){console.log(JSON.stringify(t,null,2));return}let r=t.capsule.status==="sealed",o=t.capsule.status==="blocked",n=r?s.green("\u2713"):o?s.red("\u25A0"):s.cyan("\u25C6");console.log(`${n} Proof-Carrying Change \xB7 ${t.capsule.status}`),console.log(s.bold(`   ${t.changeId}`)),console.log(s.gray(`   State: ${t.state}`)),console.log(s.gray(`   Assurance: ${t.capsule.assurances.filter(a=>a.status==="passed").length}/${t.capsule.assurances.length} passed`)),t.capsule.remainingUncertainty.length>0&&console.log(s.yellow(`   Uncertainty: ${t.capsule.remainingUncertainty.join(" ")}`)),console.log(s.gray(`   Capsule: ${t.artifacts.capsule}`));for(let a of t.nextActions)console.log(s.gray(`   Next: ${a}`));}async function Pt(t,e,r){try{let o=await e();Gm(o,t.json);let n=r?.(o);n!==void 0&&(process.exitCode=n);}catch(o){let n=o instanceof Error?o.message:String(o);t.json?console.log(JSON.stringify({schemaVersion:"workspai.change-error.v1",status:"error",message:n},null,2)):console.error(s.red(`Proof-Carrying Change failed: ${n}`)),process.exitCode=1;}}var Vm=new Set(["filesystem","command","configuration","dependency","external"]);function Jm(t){let e=[...new Set(t.split(",").map(r=>r.trim()).filter(Boolean))];for(let r of e)if(!Vm.has(r))throw new Error(`Unsupported effect class: ${r}`);return e}function rt(t){return t.option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit a versioned machine-readable result")}function Wp(t){let e=t.command("change").description("Create and verify tamper-evident, architecture-aware change capsules");rt(e.command("begin").description("Pin an active Goal and architecture baseline")).option("--goal <goal-id>","Require this Goal Pack to be the active Goal").action(async a=>{await Pt(a,()=>c$8({workspacePath:tt(a),goalId:a.goal}));}),rt(e.command("list").description("List discoverable change capsules and integrity")).action(async a=>{try{let i=await m({workspacePath:tt(a)});if(a.json){console.log(JSON.stringify(i,null,2));return}console.log(s.bold(`Proof-Carrying Changes \xB7 ${i.summary.total}`)),i.changes.length===0&&console.log(s.gray("  No changes recorded."));for(let c of i.changes){let l=c.valid?c.status==="sealed"?s.green("\u2713"):s.cyan("\u25C6"):s.red("\u25A0");console.log(`${l} ${c.changeId} \xB7 ${c.status} \xB7 ${c.assurance.passed}/${c.assurance.total}`);}}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(s.red(c)),process.exitCode=1;}}),rt(e.command("predict").description("Attach a noncanonical architecture prediction")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <prediction.json>","Typed predicted architecture change JSON").action(async a=>{await Pt(a,async()=>d$9({workspacePath:tt(a),changeId:a.change,prediction:q$4(await za(a.file))}));}),rt(e.command("authorize").description("Grant bounded effect capabilities")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--effects <classes>","Comma-separated filesystem,command,configuration,dependency,external classes").option("--granted-by <identity>","Human or policy identity granting authorization","operator").action(async a=>{await Pt(a,()=>f$2({workspacePath:tt(a),changeId:a.change,effectClasses:Jm(a.effects),grantedBy:a.grantedBy}));}),rt(e.command("resume").description("Resume a blocked transaction with human intent")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--to <state>","Resume target: authorized, executing, or verifying").requiredOption("--reason <text>","Durable reason for resuming").option("--actor <identity>","Human identity resuming the change","operator").action(async a=>{await Pt(a,()=>{if(!["authorized","executing","verifying"].includes(a.to))throw new Error("--to must be authorized, executing, or verifying.");return g$b({workspacePath:tt(a),changeId:a.change,resumeTo:a.to,reason:a.reason,actorId:a.actor})});});let r=e.command("effect").description("Record typed observed effects");rt(r.command("record").description("Append an idempotent effect receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed effect receipt JSON").action(async a=>{await Pt(a,async()=>h$6({workspacePath:tt(a),changeId:a.change,receipt:r$5(await za(a.file))}));});let o=e.command("verification").description("Record independent Goal-criterion verification");rt(o.command("record").description("Append an exact-generation verification receipt")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--file <receipt.json>","Typed verification receipt JSON").action(async a=>{await Pt(a,async()=>i$5({workspacePath:tt(a),changeId:a.change,receipt:s$5(await za(a.file))}));}),rt(e.command("status").description("Inspect the derived transaction and assurance state")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{await Pt(a,()=>l$8({workspacePath:tt(a),changeId:a.change,operation:"status"}));}),rt(e.command("explain").description("Explain proof, uncertainty, and next actions")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{await Pt(a,()=>l$8({workspacePath:tt(a),changeId:a.change,operation:"explain"}));}),rt(e.command("verify").description("Re-observe architecture and verify exact effects")).requiredOption("--change <change-id>","Proof-carrying change id").option("--strict","Treat advisory Workspace Verify findings as blockers").option("--no-refresh","Use current canonical intelligence without refreshing it").action(async a=>{await Pt(a,()=>k$6({workspacePath:tt(a),changeId:a.change,strict:a.strict,refresh:a.refresh}),i=>Fm({strict:a.strict===true,state:i.state}));}),rt(e.command("abort").description("Terminate an open change without deleting evidence")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--reason <text>","Durable reason for aborting the change").option("--actor <identity>","Human identity aborting the change","operator").action(async a=>{await Pt(a,()=>n$3({workspacePath:tt(a),changeId:a.change,reason:a.reason,actorId:a.actor}));});let n=e.command("capsule").description("Validate or export a change capsule");rt(n.command("validate").description("Validate capsule and referenced local evidence")).requiredOption("--change <change-id>","Proof-carrying change id").action(async a=>{try{let i=await o$1({workspacePath:tt(a),changeId:a.change});a.json?console.log(JSON.stringify(i,null,2)):console.log(i.valid?s.green(`\u2713 Capsule ${a.change} is valid.`):s.red(`\u25A0 Capsule ${a.change} is invalid: ${i.errors.join("; ")}`)),i.valid||(process.exitCode=1);}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({valid:false,errors:[c]},null,2)):console.error(s.red(c)),process.exitCode=1;}}),rt(n.command("export").description("Export a validated portable capsule manifest")).requiredOption("--change <change-id>","Proof-carrying change id").requiredOption("--output <path>","Workspace-contained export path").action(async a=>{try{let i=await p$1({workspacePath:tt(a),changeId:a.change,outputPath:a.output});a.json?console.log(JSON.stringify(i,null,2)):console.log(s.green(`\u2713 Capsule exported: ${i.outputPath}`));}catch(i){let c=i instanceof Error?i.message:String(i);a.json?console.log(JSON.stringify({status:"error",message:c},null,2)):console.error(s.red(c)),process.exitCode=1;}});}var Ya="agent-framework-change-plan",qm="workspai.agent-framework-managed-file.v1",Dp=1024*1024;function Ht(t){return t.replaceAll("\\","/").replace(/^\.\//,"").replace(/\/$/,"")}function Fp(t,e){let r=Ht(t);return r==="."||r===""?Ht(e):`${r}/${Ht(e)}`}function Xa(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,48)||"project",r=createHash("sha256").update(t).digest("hex").slice(0,12);return `${e}-${r}`}function Za(t){return createHash("sha256").update(`${JSON.stringify(t.manifest)}
+`).digest("hex")}function Gp(t){let e=t.registry.resolveAdapter(t.adapterId);if(e.status!=="admitted"||!e.entry){let o=e.blockers.length>0?` ${e.blockers.join(" ")}`:"";throw new Error(`Agent framework adapter is not admitted: ${t.adapterId}.${o}`)}let r=E$1.find(o=>o.manifest.adapter.id===e.entry?.manifest.adapter.id);if(!r||Za(r)!==e.entry.manifestSha256)throw new Error(`Admitted adapter implementation does not match its registry manifest: ${t.adapterId}`);return r}function zm(t){return `.workspai/agent-frameworks/ownership/${Xa(t.adapterId)}/${Xa(t.projectName)}/${D$1(t.instanceName)}.json`}async function Vp(t,e){let r=b.resolve(t),o=await b$q(r,m$8);if(!o)throw new Error("Workspace Model is missing; run Workspace Intelligence before planning an agent framework change.");let n=await M__default.readJson(o),a=n.projects.filter(p=>p.name===e||Ht(p.path)===Ht(e));if(a.length!==1)throw new Error(a.length===0?`Project is not present in the canonical Workspace Model: ${e}`:`Project target is ambiguous in the canonical Workspace Model: ${e}`);let i=a[0],c=k$5(r,i);if(!(await M__default.stat(c).catch(()=>null))?.isDirectory())throw new Error(`Canonical project root is unavailable: ${i.name}`);return {workspacePath:r,workspaceName:n.workspace.name,projectName:i.name,projectRoot:c,artifactPrefix:c===r?".":b$d({workspacePath:r,projectPath:c,projectName:i.name}).contractRelativePath}}async function Qa(t,e){let r=b.resolve(t),o=b.resolve(r,e),n=b.relative(r,o);if(!n||n===".."||n.startsWith(`..${b.sep}`)||b.isAbsolute(n))throw new Error(`Managed path escapes the canonical project root: ${e}`);let a=await M__default.realpath(r),i=o;for(;!await M__default.pathExists(i);){let p=b.dirname(i);if(p===i)throw new Error(`Cannot resolve managed path: ${e}`);i=p;}let c=await M__default.realpath(i),l=b.relative(a,c);if(l===".."||l.startsWith(`..${b.sep}`)||b.isAbsolute(l))throw new Error(`Managed path resolves through a symlink outside the project root: ${e}`);if(await M__default.pathExists(o)){let p=await M__default.lstat(o);if(!p.isFile()||p.isSymbolicLink())throw new Error(`Managed target is not a regular file: ${e}`)}return o}async function Ym(t,e,r){let o=e.render({projectRoot:t.projectRoot,instanceName:r}).files,n=new Map;for(let a of o){let i=await Qa(t.projectRoot,a.path),c=await M__default.stat(i).catch(()=>null);if(c){if(c.size>Dp)throw new Error(`Managed file exceeds the ${Dp} byte safety limit: ${a.path}`);n.set(a.path,await M__default.readFile(i,"utf8"));}}return n}async function Xm(t){let e=zm({adapterId:t.adapter.manifest.adapter.id,projectName:t.target.projectName,instanceName:t.instanceName}),r=await b$q(t.target.workspacePath,e);if(!r)return {path:e,ledger:new Map};let o=await M__default.readJson(r);if(a$4(o,C$1,"Agent framework ownership receipt"),o.schemaVersion!==z||o.adapter?.id!==t.adapter.manifest.adapter.id||o.adapter.version!==t.adapter.manifest.adapter.version||o.adapter.manifestSha256!==Za(t.adapter)||o.framework?.id!==t.adapter.manifest.framework.id||!t.adapter.manifest.framework.testedVersions.includes(o.framework.version)||o.target?.workspace!==t.target.workspaceName||o.target?.project!==t.target.projectName||Ht(o.target.artifactPrefix)!==t.target.artifactPrefix||o.target.instanceName!==D$1(t.instanceName)||!Array.isArray(o.files))throw new Error(`Agent framework ownership receipt is incompatible or corrupt: ${e}`);let n=new Map;for(let a of o.files){if(!a||typeof a.path!="string"||!/^[a-f0-9]{64}$/.test(a.sha256))throw new Error(`Agent framework ownership receipt contains an invalid file entry: ${e}`);if(n.has(a.path))throw new Error(`Agent framework ownership receipt contains duplicate paths: ${e}`);n.set(a.path,a.sha256);}return {path:e,ledger:n}}async function Jp(t){let[e,r]=await Promise.all([Ym(t.target,t.adapter,t.instanceName),Xm(t)]);return {input:{projectRoot:t.target.projectRoot,instanceName:t.instanceName,target:{project:t.target.projectName,artifactPrefix:t.target.artifactPrefix},existingFiles:e,ownershipLedger:r.ledger},receiptPath:r.path}}async function Kp(t){let e=Gp(t),r=await Vp(t.workspacePath,t.project),o=await Jp({target:r,adapter:e,instanceName:t.instanceName}),n=e.plan(t.mode,o.input);a$4(n,B,"Agent framework change plan");let a=c$h(n);if(n.status!=="planned")return {status:n.status,changeId:t.changeId,project:r.projectName,plan:n,planArtifact:null,planDigest:a};await d$9({workspacePath:r.workspacePath,changeId:t.changeId,actorKind:"cli",actorId:"workspai-agent-framework",prediction:{schemaVersion:i$2,changeId:t.changeId,goalId:"",generatedAt:new Date().toISOString(),baselineGeneration:"",nonCanonical:true,proofEligible:false,operations:n.files.map(c=>({operation:"change",targetKind:"artifact",targetId:Fp(r.artifactPrefix,c.path),rationale:`${c.overwrite} under the admitted agent-framework plan.`,confidence:"high"})),assumptions:["Only hash-bound Workspai-managed files in the admitted ownership roots will change."],predictedRisk:n.files.length>0?"low":"none"}});let i=await e$d({workspacePath:r.workspacePath,changeId:t.changeId,role:Ya,schemaVersion:y,contractPath:B,payload:n,actorId:"workspai-agent-framework"});return {status:"planned",changeId:t.changeId,project:r.projectName,plan:n,planArtifact:i.artifact,planDigest:i.digest}}async function Qm(t,e){let o=(await a$Q(t,e)).transaction.plans.filter(c=>c.role===Ya);if(o.length!==1)throw new Error(`PCC transaction must contain exactly one ${Ya} reference.`);let n=o[0],a=await b$q(t,n.artifact);if(!a)throw new Error(`Attached agent framework plan is missing: ${n.artifact}`);let i=await M__default.readJson(a);if(a$4(i,B,"Attached agent framework change plan"),c$h(i)!==n.digest.value)throw new Error("Attached agent framework plan digest does not match the PCC event chain.");return i}function Zm(t){let{transaction:e}=t;if(e.state!=="authorized"&&e.state!=="executing")throw new Error(`Agent framework apply requires an authorized PCC transaction; observed ${e.state}.`);if(!e.authorization?.effectClasses.includes("filesystem"))throw new Error("Agent framework apply requires an explicit filesystem effect grant.");if(!e.scope?.projects.includes(t.projectName))throw new Error(`Project ${t.projectName} is outside the immutable PCC scope.`)}function eg(t,e){return {role:"agent-framework-managed-file",artifact:t,schemaVersion:qm,digest:{algorithm:"sha256",semantics:"raw-bytes-v1",value:e}}}async function tg(t,e){await M__default.ensureDir(b.dirname(t));let r=`${t}.${process.pid}.${randomUUID()}.workspai-tmp`;try{await M__default.writeFile(r,e,{encoding:"utf8",flag:"wx"});try{await M__default.rename(r,t);}catch(o){let n=o.code;if(n!=="EEXIST"&&n!=="EPERM")throw o;await M__default.move(r,t,{overwrite:true});}}finally{await M__default.remove(r).catch(()=>{});}}async function es(t){let e=Gp(t),r=await Vp(t.workspacePath,t.project),o=b.join(r.workspacePath,".workspai","locks","agent-framework",Xa(`${r.projectName}:${e.manifest.adapter.id}`));return a$P(o,async()=>{let[n,a]=await Promise.all([a$Q(r.workspacePath,t.changeId),Qm(r.workspacePath,t.changeId)]);if(Zm({transaction:n.transaction,projectName:r.projectName}),a.status!=="planned"||a.adapterId!==e.manifest.adapter.id||a.adapterVersion!==e.manifest.adapter.version)throw new Error("Attached plan is not executable by the selected adapter version.");if(a.target.project!==r.projectName||Ht(a.target.artifactPrefix)!==r.artifactPrefix)throw new Error("Attached plan target does not match the canonical Workspace Model project.");let i=await Jp({target:r,adapter:e,instanceName:a.instanceName}),c=e.plan(a.mode,i.input);if(c$h(c)!==c$h(a))throw new Error("Agent framework plan is stale; project files or ownership evidence changed after authorization.");let l=e.render(i.input);if(l.conflicts.length>0)throw new Error("Adapter render became blocked after authorization.");let p=new Map(a.files.map(y=>[y.path,y]));if(l.files.length!==p.size||l.files.some(y=>{let S=p.get(y.path);return !S||S.sha256!==y.sha256||S.overwrite!==y.overwrite}))throw new Error("Rendered files do not match the hash-bound PCC plan.");let f=new Map,u=[],g=await b$q(r.workspacePath,i.receiptPath),j=g?await M__default.readFile(g):null;try{for(let R of l.files){let d=await Qa(r.projectRoot,R.path);f.set(R.path,await M__default.pathExists(d)?await M__default.readFile(d):null),await tg(d,R.content),u.push({path:R.path,artifact:Fp(r.artifactPrefix,R.path),sha256:R.sha256});}let y=e.render({projectRoot:r.projectRoot,instanceName:a.instanceName,target:a.target}).files,S={schemaVersion:z,generatedAt:new Date().toISOString(),changeId:t.changeId,adapter:{id:e.manifest.adapter.id,version:e.manifest.adapter.version,manifestSha256:Za(e)},framework:{id:e.manifest.framework.id,version:a.frameworkVersion},target:{workspace:r.workspaceName,project:r.projectName,artifactPrefix:r.artifactPrefix,instanceName:a.instanceName},files:y.map(R=>({path:R.path,sha256:R.sha256}))};a$4(S,C$1,"Agent framework ownership receipt"),await h$5(r.workspacePath,i.receiptPath,S);let E={role:"agent-framework-ownership-receipt",artifact:i.receiptPath,schemaVersion:z,digest:{algorithm:"sha256",semantics:"canonical-json-v1",value:c$h(S)}};return await h$6({workspacePath:r.workspacePath,changeId:t.changeId,actorKind:"cli",actorId:"workspai-agent-framework",receipt:{id:`agent-framework-${t.changeId}`,effectClass:"filesystem",status:"succeeded",summary:`Applied ${e.manifest.framework.name} instance ${a.instanceName}.`,artifacts:[...u.map(R=>eg(R.artifact,R.sha256)),E],observedAt:S.generatedAt,idempotencyKey:`agent-framework:${t.changeId}:${c$h(a)}`}}),{status:"applied",changeId:t.changeId,project:r.projectName,adapterId:e.manifest.adapter.id,instanceName:a.instanceName,files:u,ownershipReceipt:i.receiptPath}}catch(y){for(let[S,E]of [...f].reverse()){let R=await Qa(r.projectRoot,S);E===null?await M__default.remove(R):await M__default.outputFile(R,E);}if(j===null){let S=await b$q(r.workspacePath,i.receiptPath);S&&await M__default.remove(S);}else await M__default.outputFile(b.join(r.workspacePath,i.receiptPath),j);throw y}},{purpose:`agent-framework:${r.projectName}:${e.manifest.adapter.id}`,timeoutMs:3e4,staleMs:6e4})}var rg=["python","dotnet"];function Hp(t){return `microsoft-agent-framework-${t}`}function ts(t){let e=t.trim().toLowerCase();if(!rg.includes(e))throw new Error(`Unsupported agent framework runtime: ${t}. Choose python or dotnet.`);return e}async function oo(t){let e=F({},{trustReviewedReleaseAdmissions:true}),r=Hp(t.runtime),o=D$1(t.instanceName),n=e.resolveAdapter(r);if(n.status!=="admitted"||!n.entry)throw new Error(`Agent framework adapter ${r} is not release-admitted. ${n.blockers.join(" ")}`);let a=t.goalId,i=!a;if(!a){let l=t.intent?.trim()||`Attach a governed Microsoft Agent Framework ${t.runtime} agent named ${o} to ${t.project}`,p=await a$k({startPath:t.workspacePath,workspacePath:t.workspacePath,intent:l,scope:`project:${t.project}`,consumer:"generic"});if(p.result!=="planned"||p.goalPack.state!=="ready-to-plan")throw new Error(`The attachment Goal is not ready (${p.goalPack.state}). Resolve its bounded evidence or pass an existing ready Goal with --goal.`);a=p.goalPack.id;}let c=await c$8({workspacePath:t.workspacePath,goalId:a,actorKind:"cli",actorId:"workspai-agent-framework"});try{let l=await Kp({workspacePath:t.workspacePath,project:t.project,changeId:c.changeId,registry:e,adapterId:r,instanceName:o,mode:t.mode??"attach"});return l.status!=="planned"&&(await n$3({workspacePath:t.workspacePath,changeId:c.changeId,reason:`Agent framework planning completed as ${l.status}; no mutation is authorized.`,actorId:"workspai-agent-framework"}),i&&await m$4({workspacePath:t.workspacePath,goalId:a,action:"cancel"})),{schemaVersion:"workspai.agent-framework-attachment.v1",operation:"plan",mode:t.mode??"attach",status:l.status,workspacePath:t.workspacePath,project:l.project,runtime:t.runtime,adapterId:r,frameworkVersion:l.plan.frameworkVersion,instanceName:l.plan.instanceName,goalId:a,changeId:l.changeId,planArtifact:l.planArtifact,files:l.plan.files,requiredEnvironment:l.plan.requiredEnvironment,permissions:l.plan.permissions,blockers:l.plan.blockers,nextActions:l.status==="planned"?[`workspai agent framework apply --project ${JSON.stringify(l.project)} --runtime ${t.runtime} --change ${l.changeId}`]:[]}}catch(l){throw await n$3({workspacePath:t.workspacePath,changeId:c.changeId,reason:`Agent framework planning failed: ${l instanceof Error?l.message:String(l)}`,actorId:"workspai-agent-framework"}).catch(()=>{}),i&&a&&await m$4({workspacePath:t.workspacePath,goalId:a,action:"cancel"}).catch(()=>{}),l}}async function mn(t){if(t.prepared.status!=="planned")throw new Error("Only a planned agent framework attachment can be applied.");let e=t.grantedBy.trim();if(!e)throw new Error("The authorization identity cannot be empty.");let r=F({},{trustReviewedReleaseAdmissions:true});await f$2({workspacePath:t.prepared.workspacePath,changeId:t.prepared.changeId,effectClasses:["filesystem"],grantedBy:e,actorKind:"human"});let o;try{o=await es({workspacePath:t.prepared.workspacePath,project:t.prepared.project,changeId:t.prepared.changeId,registry:r,adapterId:t.prepared.adapterId});}catch(n){throw await n$3({workspacePath:t.prepared.workspacePath,changeId:t.prepared.changeId,reason:`Agent framework apply failed: ${n instanceof Error?n.message:String(n)}`,actorId:"workspai-agent-framework"}).catch(()=>{}),n}return {...t.prepared,operation:t.prepared.mode,status:"applied",files:o.files.map(n=>({path:n.path,sha256:n.sha256,overwrite:"applied"})),ownershipReceipt:o.ownershipReceipt,nextActions:[`workspai workspace intelligence run --workspace ${JSON.stringify(t.prepared.workspacePath)} --for-agent generic --strict --json`,`workspai change verify --workspace ${JSON.stringify(t.prepared.workspacePath)} --change ${t.prepared.changeId} --json`]}}async function Bp(t){let e=F({},{trustReviewedReleaseAdmissions:true}),r=Hp(t.runtime),o=await es({workspacePath:t.workspacePath,project:t.project,changeId:t.changeId,registry:e,adapterId:r});return {schemaVersion:"workspai.agent-framework-attachment.v1",operation:"apply",status:"applied",project:o.project,runtime:t.runtime,adapterId:r,changeId:o.changeId,files:o.files,ownershipReceipt:o.ownershipReceipt,nextActions:[`workspai workspace intelligence run --workspace ${JSON.stringify(t.workspacePath)} --for-agent generic --strict --json`,`workspai change verify --workspace ${JSON.stringify(t.workspacePath)} --change ${t.changeId} --json`]}}function rs(t){let e=b$5({startPath:process.cwd(),explicitWorkspacePath:t.workspace,strict:true,requireProjectMembership:!t.workspace});if(!e)throw new Error("No canonical Workspai workspace could be resolved.");return b.resolve(e.workspacePath)}async function Up(t,e,r){let o=await a$j(t);if(o.status==="miss")throw new Error(`Canonical Workspace Model and Graph are required (${o.reason}). Run workspai workspace intelligence run --for-agent generic --strict --json.`);let n=o.model.projects.map(i=>({name:i.name,path:i.path,runtime:i.runtime})).sort((i,c)=>i.name.localeCompare(c.name));if(e){let i=n.filter(c=>c.name===e||c.path===e);if(i.length!==1)throw new Error(i.length===0?`Project is not present in the canonical Workspace Model: ${e}`:`Project target is ambiguous: ${e}`);return i[0].name}if(n.length===1)return n[0].name;if(!r)throw new Error("--project is required when the workspace has multiple projects.");return (await b$1([{type:"rawlist",name:"project",message:"Which project should own this agent?",choices:n.map(i=>({value:i.name,label:i.name,hint:`${i.runtime} \xB7 ${i.path}`}))}])).project}async function qp(t,e){if(t)return ts(t);if(!e)throw new Error("--runtime is required. Choose python or dotnet.");return (await b$1([{type:"rawlist",name:"runtime",message:"Choose the agent runtime:",choices:[{value:"python",label:"Python",hint:"Python 3.10+ \xB7 tested baseline"},{value:"dotnet",label:".NET",hint:".NET 8+ \xB7 tested baseline"}]}])).runtime}async function zp(t,e){if(t?.trim())return t.trim();if(!e)throw new Error("--name is required.");return (await b$1([{type:"input",name:"instanceName",message:"Name this agent:",default:"workspace-agent",validate:o=>o.trim().length>0||"Agent name is required"}])).instanceName.trim()}function os(t){let e=t.status==="planned"?s.cyan:t.status==="no-op"?s.green:s.red;console.log(e(`\u25C6 Microsoft Agent Framework \xB7 ${t.status}`)),console.log(s.bold(`   ${t.instanceName} \xB7 ${t.runtime} \xB7 ${t.project}`)),console.log(s.gray(`   Framework: ${t.frameworkVersion}`)),console.log(s.gray(`   Goal: ${t.goalId}`)),console.log(s.gray(`   Change: ${t.changeId}`));for(let r of t.files)console.log(s.gray(`   ${r.overwrite}: ${r.path}`));t.requiredEnvironment.length>0&&console.log(s.gray(`   Secret references: ${t.requiredEnvironment.join(", ")}`)),console.log(s.gray("   Dependency install: not executed"));for(let r of t.blockers)console.log(s.red(`   Blocked: ${r}`));for(let r of t.nextActions)console.log(s.gray(`   Next: ${r}`));}function Yp(t){console.log(s.green("\u2714 Governed agent attached")),console.log(s.bold(`   ${t.runtime} \xB7 ${t.project}`)),console.log(s.gray(`   Change: ${t.changeId}`)),console.log(s.gray(`   Managed files: ${t.files.length}`)),console.log(s.gray(`   Ownership: ${t.ownershipReceipt}`)),console.log(s.gray("   Dependencies and model calls were not executed."));for(let e of t.nextActions)console.log(s.gray(`   Next: ${e}`));}function ns(t,e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify({schemaVersion:"workspai.agent-framework-operation-error.v1",status:"error",message:r},null,2)):console.error(s.red(`Agent Framework failed: ${r}`)),process.exitCode=1;}function Xp(t){let e=t.command("framework").description("Create and attach release-admitted agent runtimes through Workspai governance");e.command("list").description("List tested framework runtimes and their release-admission state").option("--json","Emit machine-readable JSON").action(o=>{let n=F({},{trustReviewedReleaseAdmissions:true}),a=n.list().map(c=>{let l=n.resolveAdapter(c.manifest.adapter.id);return {id:c.manifest.adapter.id,framework:c.manifest.framework.name,runtime:c.manifest.implementation.runtimes[0],frameworkVersion:c.manifest.framework.testedVersions[0],status:l.status,blockers:l.blockers}}),i={schemaVersion:"workspai.agent-framework-list.v1",adapters:a};if(o.json)console.log(JSON.stringify(i,null,2));else {console.log(s.bold("Agent Framework runtimes"));for(let c of a){let l=c.status==="admitted"?s.green("\u25CF"):s.red("\u25A0");console.log(`${l} ${c.framework} \xB7 ${c.runtime} \xB7 ${c.frameworkVersion} \xB7 ${c.status}`);}}});let r=o=>o.option("--workspace <path>","Explicit canonical workspace path").option("--project <name>","Canonical project name or path").option("--runtime <runtime>","python or dotnet").option("--name <name>","Agent instance name").option("--goal <goal-id>","Reuse an existing ready Goal Pack").option("--intent <text>","Plain-language Goal intent when creating a dedicated Goal").option("--json","Emit machine-readable JSON");r(e.command("plan").description("Create a hash-bound attachment plan without writing project files")).action(async o=>{try{let n=!o.json&&process.stdin.isTTY===true,a=rs(o),i=await Up(a,o.project,n),c=await qp(o.runtime,n),l=await zp(o.name,n),p=await oo({workspacePath:a,project:i,runtime:c,instanceName:l,goalId:o.goal,intent:o.intent});o.json?console.log(JSON.stringify(p,null,2)):os(p),p.status==="blocked"&&(process.exitCode=2);}catch(n){ns(o,n);}}),r(e.command("attach").description("Plan, approve, and write one isolated governed agent instance").option("-y, --yes","Approve the displayed filesystem plan without another prompt").option("--granted-by <identity>","Identity recorded in the authorization","operator")).action(async o=>{try{let n=!o.json&&process.stdin.isTTY===true,a=rs(o),i=await Up(a,o.project,n),c=await qp(o.runtime,n),l=await zp(o.name,n),p=await oo({workspacePath:a,project:i,runtime:c,instanceName:l,goalId:o.goal,intent:o.intent});if(p.status!=="planned"){o.json?console.log(JSON.stringify(p,null,2)):os(p),process.exitCode=p.status==="blocked"?2:0;return}let f=o.yes===true;if(!f&&n&&(os(p),f=(await b$1([{type:"confirm",name:"approved",message:`Write these ${p.files.length} Workspai-managed files?`,default:false}])).approved),!f){o.json?console.log(JSON.stringify(p,null,2)):(console.log(s.yellow("Plan saved; no project files were written.")),console.log(s.gray(`   Change: ${p.changeId}`)));return}let u=await mn({prepared:p,grantedBy:o.grantedBy});o.json?console.log(JSON.stringify(u,null,2)):Yp(u);}catch(n){ns(o,n);}}),e.command("apply").description("Apply an already authorized hash-bound framework plan").requiredOption("--change <change-id>","Proof-Carrying Change id").requiredOption("--project <name>","Canonical project name or path").requiredOption("--runtime <runtime>","python or dotnet").option("--workspace <path>","Explicit canonical workspace path").option("--json","Emit machine-readable JSON").action(async o=>{try{let n=await Bp({workspacePath:rs(o),project:o.project,runtime:ts(o.runtime),changeId:o.change});o.json?console.log(JSON.stringify(n,null,2)):Yp(n);}catch(n){ns(o,n);}});}var fn=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,r,o=3){let n=[],a=[{dir:e,depth:0}],i=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;a.length>0;){let c=a.shift();if(!c||c.depth>o)continue;let l=[];try{l=$.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let p of l){let f=b.join(c.dir,p.name);if(p.isDirectory()){i.has(p.name)||a.push({dir:f,depth:c.depth+1});continue}p.name.toLowerCase().endsWith(r.toLowerCase())&&n.push(f);}}return n.sort()}findProjectFile(e){let r=this.findFilesBySuffix(e,".csproj");return r.find(o=>!o.toLowerCase().includes(".tests.csproj"))||r[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(o=>o.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let r=await this.ensureDotnetInstalled(e);return r||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=await this.run("dotnet",o?["restore",o]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=o?["watch","--project",o,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",o?["test",o]:["test"],e)}async runBuild(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["build",o,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["run","--project",o]:["run"],e)}async runLint(e){if(!b$3()&&w$3(e,"lint"))return this.run("make",["lint"],e);let r=b.join(e,"Directory.Build.props");if($.existsSync(r)&&$.readFileSync(r,"utf-8").includes("EnforceCodeStyleInBuild")){let o=await this.ensureDotnetInstalled(e);if(o)return o;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$3()&&w$3(e,"format"))return this.run("make",["format"],e);let r=await this.ensureDotnetInstalled(e);return r||($.existsSync(b.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var hn=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(e){let r=e;for(;;){if($.existsSync(b.join(r,".workspai-workspace"))||$.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>$.existsSync(a));if(!n)return "isolated";try{let c=$.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","go"):b.join(e,".workspai","cache","go"),i=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=b.join(a,"mod"),process.env.GOCACHE=b.join(a,"build"),r().finally(()=>{typeof i>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=i,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&$.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&$.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let r=await this.ensureGoInstalled(e);if(r)return r;let o=b.join(e,"Makefile");if(!b$3()&&$.existsSync(o)&&w$3(e,"run"))return this.run("make",["run"],e);let n=v$3(e);return n?this.run("go",["run",n],e):{exitCode:1,message:"No unambiguous Go run target was detected. Add a root main package, keep one cmd/<name>/main.go target, or declare a Makefile run target."}})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let o=(b$3()?[b.join(e,"server.exe"),b.join(e,"server")]:[b.join(e,"server")]).find(i=>$.existsSync(i));if(o)return this.run(o,[],e);let n=await this.ensureGoInstalled(e);if(n)return n;let a=v$3(e);return a?this.run("go",["run",a],e):{exitCode:1,message:"No unambiguous Go start target was detected. Add a root main package, keep one cmd/<name>/main.go target, declare a Makefile run target, or provide the built server binary."}})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$3(e,"lint")?this.run("make",["lint"],e):$.existsSync(b.join(e,".golangci.yml"))||$.existsSync(b.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$3()&&w$3(e,"fmt")?this.run("make",["fmt"],e):!b$3()&&w$3(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var wn=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return  true;try{return ($.statSync(e).mode&73)!==0}catch{return  false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return  true;try{return $.chmodSync(e,493),this.isExecutable(e)}catch{return  false}}resolveJavaCommand(e){let r=process.env.JAVA_HOME?.trim();if(!r)return "java";let o=b.join(r,"bin",process.platform==="win32"?"java.exe":"java");return $.existsSync(o)?o:"java"}parseMajorJavaVersion(e){if(!e)return null;let o=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(o,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let r=b.join(e,"pom.xml");if(!$.existsSync(r))return 21;try{let n=$.readFileSync(r,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,r){try{let o=await execa(e,["-version"],{cwd:r,timeout:5e3,reject:false});if(o.exitCode!==0)return null;let n=`${o.stdout||""}
 ${o.stderr||""}`,a=n.match(/version\s+"([^"]+)"/i);if(a?.[1])return this.parseMajorJavaVersion(a[1]);let i=n.match(/(?:openjdk|java)\s+(\d+(?:[._]\d+)?)/i);return i?.[1]?this.parseMajorJavaVersion(i[1]):null}catch{return null}}parseMavenVersion(e){if(!e)return null;let r=e.match(/Apache Maven\s+(\d+)\.(\d+)\.(\d+)/i);return r?[Number.parseInt(r[1],10),Number.parseInt(r[2],10),Number.parseInt(r[3],10)]:null}isMavenVersionAtLeast(e,r){for(let o=0;o<3;o+=1){if(e[o]>r[o])return  true;if(e[o]<r[o])return  false}return  true}async checkSystemMavenVersion(e){try{let r=await execa("mvn",["-version"],{cwd:e,timeout:5e3,reject:false});if(r.exitCode!==0)return {exitCode:r.exitCode||1,message:"Maven is required and must be available on PATH (3.9+)."};let o=this.parseMavenVersion(`${r.stdout||""}
-${r.stderr||""}`);return o?this.isMavenVersionAtLeast(o,[3,9,0])?{exitCode:0}:{exitCode:1,message:`Maven ${o.join(".")} detected; Maven 3.9+ is required.`}:{exitCode:1,message:"Unable to parse Maven version. Ensure Maven 3.9+ is installed and retry."}}catch{return {exitCode:1,message:"Maven version check failed. Install Maven 3.9+ and ensure mvn is on PATH."}}}shouldUseGradleNoDaemon(){return process.env.CI==="true"||process.env.RAPIDKIT_GRADLE_NO_DAEMON==="1"}inspectJavaProject(e){let r=O.existsSync(P.join(e,"pom.xml")),o=O.existsSync(P.join(e,"mvnw"))||O.existsSync(P.join(e,"mvnw.cmd")),n=O.existsSync(P.join(e,"build.gradle"))||O.existsSync(P.join(e,"build.gradle.kts"))||O.existsSync(P.join(e,"settings.gradle"))||O.existsSync(P.join(e,"settings.gradle.kts")),a=O.existsSync(P.join(e,"gradlew"))||O.existsSync(P.join(e,"gradlew.bat"));return {hasMavenProject:r||o,hasMavenWrapper:o,hasGradleProject:n||a,hasGradleWrapper:a}}findWorkspaceRoot(e){let r=e;for(;;){if(O.existsSync(P.join(r,".workspai-workspace"))||O.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>O.existsSync(a));if(!n)return "isolated";try{let c=O.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}buildToolCommand(e){return this.isGradleProject(e)?this.gradleCommand(e):this.mavenCommand(e)}mavenCommand(e){let r=P.join(e,"mvnw.cmd");if(process.platform==="win32"&&O.existsSync(r))return {command:r,baseArgs:[]};let o=P.join(e,"mvnw");return O.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"mvn",baseArgs:[]}}gradleCommand(e){let r=P.join(e,"gradlew.bat");if(process.platform==="win32"&&O.existsSync(r))return {command:r,baseArgs:[]};let o=P.join(e,"gradlew");return O.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"gradle",baseArgs:[]}}isGradleProject(e){return this.inspectJavaProject(e).hasGradleProject}isMavenProject(e){return this.inspectJavaProject(e).hasMavenProject}discoverWorkspaceJavaProjects(e){let r=[],o=new Set,n=[e];for(;n.length>0;){let a=n.shift();if(!a||o.has(a))continue;o.add(a);let i=[];try{i=O.readdirSync(a,{withFileTypes:true});}catch{continue}for(let c of i){if(!c.isDirectory()||c.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(c.name))continue;let l=P.join(a,c.name),p=this.inspectJavaProject(l);(p.hasMavenProject||p.hasGradleProject)&&r.push(l),n.push(l);}}return r}withJavaCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","java","m2"):P.join(e,".workspai","cache","java","m2"),i=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","java","gradle"):P.join(e,".workspai","cache","java","gradle"),c=process.env.MAVEN_OPTS,l=process.env.GRADLE_USER_HOME,p=`-Dmaven.repo.local=${a}`;return process.env.MAVEN_OPTS=c?`${c} ${p}`:p,process.env.GRADLE_USER_HOME=i,r().finally(()=>{typeof c>"u"?delete process.env.MAVEN_OPTS:process.env.MAVEN_OPTS=c,typeof l>"u"?delete process.env.GRADLE_USER_HOME:process.env.GRADLE_USER_HOME=l;})}async runBuildTool(e,r,o=true){return this.withJavaCacheEnv(e,async()=>{try{let{command:n,baseArgs:a}=this.buildToolCommand(e),i=await this.runCommand(n,[...a,...r],e);if(i===0||!o)return {exitCode:i};let c=O.existsSync(P.join(e,"pom.xml")),l=O.existsSync(P.join(e,"build.gradle"))||O.existsSync(P.join(e,"build.gradle.kts"));return {exitCode:i,message:c||l?"Java build failed. Verify pom.xml/build.gradle syntax and dependencies, then retry.":"Java build tool is not installed or not available on PATH. Install Maven/Gradle and JDK 21+, or commit mvnw/gradlew wrapper scripts."}}catch(n){return {exitCode:1,message:`Java command execution failed: ${n instanceof Error?n.message:String(n)}. Verify pom.xml/build.gradle integrity and wrapper permissions.`}}})}resolveJarPath(e){let r=[P.join(e,"target"),P.join(e,"build","libs")];for(let o of r){if(!O.existsSync(o))continue;let a=O.readdirSync(o).filter(i=>i.toLowerCase().endsWith(".jar")).find(i=>!i.toLowerCase().endsWith("-sources.jar")&&!i.toLowerCase().endsWith("-javadoc.jar")&&!i.toLowerCase().endsWith("-plain.jar"));if(a)return P.join(o,a)}return null}commandArgsFor(e,r){if(e==="gradle"){let o=this.shouldUseGradleNoDaemon()?["--no-daemon"]:[];return r==="init"?[...o,"dependencies"]:r==="dev"?[...o,"bootRun"]:r==="test"?[...o,"test"]:[...o,"bootJar"]}return r==="init"?["-B","-q","-DskipTests","dependency:go-offline"]:r==="dev"?["spring-boot:run"]:r==="test"?["test"]:["-DskipTests","package"]}detectBuildTool(e){return this.isGradleProject(e)?"gradle":"maven"}async checkPrereqs(){let e=process.cwd(),r=this.resolveJavaCommand(e),o=await this.runCommand(r,["-version"],e);if(o!==0)return {exitCode:o,message:"JDK 21+ is required. Ensure java is on PATH or JAVA_HOME/bin/java is available."};if(this.isMavenProject(e)){let c=this.readRequiredJavaMajor(e),l=await this.detectInstalledJavaMajor(r,e);if(l!==null&&l<c)return {exitCode:1,message:`Detected Java ${l}, but project requires Java ${c}+.`};let p=P.join(process.env.JAVA_HOME||"","release");if(process.env.JAVA_HOME&&O.existsSync(p))try{let u=O.readFileSync(p,"utf-8").match(/^JAVA_VERSION="([^"]+)"/m),f=this.parseMajorJavaVersion(u?.[1]);if(f!==null&&f<c)return {exitCode:1,message:`Detected JAVA_HOME version ${f}, but project requires Java ${c}+.`}}catch{}}if(this.isMavenProject(e)||this.isGradleProject(e)){let c=this.detectBuildTool(e),l=c==="gradle"?["--version"]:["-version"],p=await this.runBuildTool(e,l);return p.exitCode!==0?p:c==="maven"&&!this.inspectJavaProject(e).hasMavenWrapper?this.checkSystemMavenVersion(e):p}let n=this.findWorkspaceRoot(e);if(n&&n===e){let c=this.discoverWorkspaceJavaProjects(n);if(c.length>0){let l=c.reduce((u,f)=>Math.max(u,this.readRequiredJavaMajor(f)),0);if(l>0){let u=await this.detectInstalledJavaMajor(r,e);if(u!==null&&u<l){let f=c.filter(b=>this.readRequiredJavaMajor(b)>u).map(b=>P.relative(e,b)).join(", ");return {exitCode:1,message:`Detected Java ${u}, but workspace project(s) [${f}] require Java ${l}+.`}}}let p=false,g=false;for(let u of c){let f=this.inspectJavaProject(u);f.hasMavenProject&&!f.hasMavenWrapper&&(p=true),f.hasGradleProject&&!f.hasGradleWrapper&&(g=true);}if(p){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(u!==0)return {exitCode:u,message:"Maven is required for one or more workspace Java projects without Maven Wrapper. Install Maven 3.9+, or add mvnw/mvnw.cmd to those projects."};let f=await this.checkSystemMavenVersion(e);if(f.exitCode!==0)return f}if(g){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));if(u!==0)return {exitCode:u,message:"Gradle is required for one or more workspace Java projects without Gradle Wrapper. Install Gradle 8+, or add gradlew/gradlew.bat to those projects."}}return {exitCode:0}}}let a=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(a===0){let c=await this.checkSystemMavenVersion(e);return c.exitCode!==0?c:{exitCode:0}}let i=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));return i===0?{exitCode:0}:{exitCode:a||i||1,message:"Neither Maven nor Gradle is available on PATH. Install one of them, or use mvnw/gradlew wrappers in project roots."}}async warmSetupCache(e){return this.withJavaCacheEnv(e,async()=>{try{let r=process.env.MAVEN_OPTS?.match(/-Dmaven\.repo\.local=([^\s]+)/)?.[1];return r&&O.mkdirSync(r,{recursive:true}),process.env.GRADLE_USER_HOME&&O.mkdirSync(process.env.GRADLE_USER_HOME,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Java cache directories"}}})}async initProject(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"init"))}async runDev(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"dev"))}async runTest(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"test"))}async runBuild(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"build"))}async runStart(e){let r=this.resolveJarPath(e);if(r)return {exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",r],e)};let o=await this.runBuild(e);if(o.exitCode!==0)return o;let n=this.resolveJarPath(e);return n?{exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",n],e)}:{exitCode:1,message:"Spring Boot build completed, but no runnable JAR was found under target/ or build/libs/. Verify build output naming and packaging plugins."}}async runLint(e){if(w$3(e,"lint"))return {exitCode:await this.runCommand("make",["lint"],e)};let r=P.join(e,"pom.xml");if(O.existsSync(r)){let o=O.readFileSync(r,"utf-8");if(o.includes("spotless-maven-plugin"))return this.runBuildTool(e,["spotless:check"]);if(o.includes("checkstyle"))return this.runBuildTool(e,["checkstyle:check"])}return {exitCode:1,message:"No Java lint tooling detected. Add a Makefile lint target or configure checkstyle in Maven/Gradle."}}async runFormat(e){if(w$3(e,"format"))return {exitCode:await this.runCommand("make",["format"],e)};let r=P.join(e,"pom.xml");return O.existsSync(r)&&O.readFileSync(r,"utf-8").includes("spotless-maven-plugin")?this.runBuildTool(e,["spotless:apply"]):["build.gradle","build.gradle.kts"].map(n=>P.join(e,n)).filter(n=>O.existsSync(n)).some(n=>O.readFileSync(n,"utf-8").includes("spotless"))?this.runBuildTool(e,["spotlessApply"]):{exitCode:1,message:"No Java format tooling detected. Add a Makefile format target or configure Spotless in Maven/Gradle."}}async doctorHints(e){return ["Install JDK 21+ and Maven/Gradle (or commit mvnw/gradlew wrappers) for reliable local builds.","Run npx workspai init after dependency changes to warm Java caches for your build tool.","Use SPRING_PROFILES_ACTIVE to switch environments without changing source config."]}};var gn=class{constructor(e){this.runCommand=e;}runCommand;runtime="node";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}findWorkspaceRoot(e){let r=e;for(;;){if(O.existsSync(P.join(r,".workspai-workspace"))||O.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>O.existsSync(a));if(!n)return "isolated";try{let c=O.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,r,o){let n=this.resolveDependencyMode(e),a=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=n==="isolated"?P.join(e,".workspai","cache","node"):P.join(a||e,".workspai","cache","node"),c=process.env.npm_config_cache,l=process.env.npm_config_store_dir,p=process.env.BUN_INSTALL_CACHE_DIR,g=process.env.RAPIDKIT_DEP_SHARING_MODE,u=process.env.RAPIDKIT_WORKSPACE_PATH;return process.env.RAPIDKIT_DEP_SHARING_MODE=n,a&&(process.env.RAPIDKIT_WORKSPACE_PATH=a),r==="bun"?process.env.BUN_INSTALL_CACHE_DIR=P.join(i,"bun-cache"):r==="pnpm"?(process.env.npm_config_store_dir=P.join(i,"pnpm-store"),process.env.npm_config_cache=P.join(i,"pnpm-cache")):r==="yarn"?process.env.npm_config_cache=P.join(i,"yarn-cache"):process.env.npm_config_cache=P.join(i,"npm-cache"),o().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof l>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=l,typeof p>"u"?delete process.env.BUN_INSTALL_CACHE_DIR:process.env.BUN_INSTALL_CACHE_DIR=p,typeof g>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=g,typeof u>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=u;})}detectPackageManager(e){if(O.existsSync(P.join(e,"bun.lock"))||O.existsSync(P.join(e,"bun.lockb")))return "bun";if(O.existsSync(P.join(e,"package-lock.json")))return "npm";if(O.existsSync(P.join(e,"pnpm-lock.yaml")))return "pnpm";if(O.existsSync(P.join(e,"yarn.lock")))return "yarn";if(!this.commandAvailable("npm")){if(this.commandAvailable("pnpm"))return "pnpm";if(this.commandAvailable("yarn"))return "yarn"}return "npm"}hasPinnedPackageManager(e){return O.existsSync(P.join(e,"package-lock.json"))||O.existsSync(P.join(e,"bun.lock"))||O.existsSync(P.join(e,"bun.lockb"))||O.existsSync(P.join(e,"pnpm-lock.yaml"))||O.existsSync(P.join(e,"yarn.lock"))}availablePackageManagers(e){let r=this.detectPackageManager(e);return this.hasPinnedPackageManager(e)?[r]:[r,...["npm","pnpm","yarn","bun"].filter(n=>n!==r&&this.commandAvailable(n))]}commandAvailable(e){let r=e$f(e);return spawnSync(r.command,[...r.prefixArgs,"--version"],{stdio:"ignore",shell:c$i(),env:g$a()}).status===0}scriptArgs(e,r){return e==="npm"?["run-script",r,"--foreground-scripts"]:["run",r]}async runScriptWithFallback(e,r){let o={exitCode:1};for(let n of this.availablePackageManagers(e))if(o=await this.withDependencyEnv(e,n,()=>this.run(n,this.scriptArgs(n,r),e)),o.exitCode===0)return o;return {...o,message:o.message??`Node lifecycle script failed. Re-run \`${z$1(e,r)}\` in ${e} to inspect the native tool output.`}}async runLifecycle(e,r){let o=j$2(e),n=m$3(e,o),a=u$1(e,r,{framework:n.key});return a?this.runScriptWithFallback(e,a.scriptName):{exitCode:1,message:`No npm script available for \`${r}\`. Add a "${r}" script to package.json.`}}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let r=this.detectPackageManager(e);return this.withDependencyEnv(e,r,async()=>{try{return process.env.npm_config_cache&&O.mkdirSync(process.env.npm_config_cache,{recursive:true}),r==="pnpm"&&process.env.npm_config_store_dir&&O.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let r=this.detectPackageManager(e),o=this.resolveDependencyMode(e),n=o==="shared-runtime-caches"||o==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,r,()=>this.run(r,n,e))}async runDev(e){return this.runLifecycle(e,"dev")}async runTest(e){return this.runLifecycle(e,"test")}async runBuild(e){return this.runLifecycle(e,"build")}async runStart(e){return this.runLifecycle(e,"start")}async runLint(e){return this.runLifecycle(e,"lint")}async runFormat(e){return this.runLifecycle(e,"format")}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var hn=class{constructor(e){this.runCore=e;}runCore;runtime="python";async run(e,r){return {exitCode:await this.withPythonCacheEnv(r,()=>this.runCore(e,r))}}findWorkspaceRoot(e){let r=e;for(;;){if(O.existsSync(P.join(r,".workspai-workspace"))||O.existsSync(P.join(r,".rapidkit-workspace")))return r;let o=P.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>O.existsSync(a));if(!n)return "isolated";try{let c=O.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?P.join(n||e,".workspai","cache","python"):P.join(e,".workspai","cache","python"),i=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=P.join(a,"pip"),process.env.POETRY_CACHE_DIR=P.join(a,"poetry"),r().finally(()=>{typeof i>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=i,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),r=await this.run(["doctor","check"],e);return r.exitCode===0?r:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx workspai doctor workspace" for a full workspace scan.','Use "npx workspai init" after adding or changing modules.',"Use `npx workspai <command>` from the project root to avoid environment drift."]}};var wn=class{constructor(e){this.runCommand=e;}runCommand;runtime="php";async run(e,r,o){let n=await this.runCommand(e,r,o);return n===0?{exitCode:n}:{exitCode:n,message:`PHP lifecycle command failed (${e} ${r.join(" ")}). Ensure ${e} is available on PATH, then review composer.json and the command diagnostics above.`}}hasComposer(e){return O.existsSync(P.join(e,"composer.json"))}hasArtisan(e){return O.existsSync(P.join(e,"artisan"))}hasComposerScript(e,r){try{let o=JSON.parse(O.readFileSync(P.join(e,"composer.json"),"utf8"));return !!o.scripts&&Object.prototype.hasOwnProperty.call(o.scripts,r)}catch{return  false}}missingManifest(){return {exitCode:1,message:"composer.json was not found. Run the command from a PHP project root."}}unsupported(e){return {exitCode:1,message:`No deterministic PHP ${e} command was detected. Add a "${e}" Composer script or the expected Laravel tooling.`}}async checkPrereqs(){let e=await this.run("php",["--version"],process.cwd());return e.exitCode!==0?e:this.run("composer",["--version"],process.cwd())}async initProject(e){return this.hasComposer(e)?this.run("composer",["install","--no-interaction"],e):this.missingManifest()}async runDev(e){return this.hasComposerScript(e,"dev")?this.run("composer",["run-script","dev"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("dev")}async runTest(e){return this.hasArtisan(e)?this.run("php",["artisan","test"],e):this.hasComposerScript(e,"test")?this.run("composer",["run-script","test"],e):this.unsupported("test")}async runBuild(e){return this.hasComposerScript(e,"build")?this.run("composer",["run-script","build"],e):this.unsupported("build")}async runStart(e){return this.hasComposerScript(e,"start")?this.run("composer",["run-script","start"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("start")}async runLint(e){for(let r of ["lint","analyse","analyze"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return this.unsupported("lint")}async runFormat(e){for(let r of ["format","fmt"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return O.existsSync(P.join(e,"vendor","bin","pint"))||O.existsSync(P.join(e,"pint.json"))?this.run("php",["vendor/bin/pint"],e):this.unsupported("format")}async doctorHints(e){return ["Install a supported PHP release and Composer, then keep both on PATH.","Commit composer.lock for deterministic application installs.","Expose test, lint, format, and build commands as Composer scripts when the framework does not provide them."]}};var yn=class{constructor(e){this.runCommand=e;}runCommand;runtime="rust";async run(e,r){let o=await this.runCommand("cargo",e,r);return o===0?{exitCode:o}:{exitCode:o,message:`Cargo command failed (cargo ${e.join(" ")}). Ensure the stable Rust toolchain and cargo are available on PATH, then review Cargo.toml and the command diagnostics above.`}}hasManifest(e){return O.existsSync(P.join(e,"Cargo.toml"))}missingManifest(){return {exitCode:1,message:"Cargo.toml was not found. Run the command from a Rust project root."}}async checkPrereqs(){return this.run(["--version"],process.cwd())}async initProject(e){return this.hasManifest(e)?this.run(["fetch"],e):this.missingManifest()}async runDev(e){return this.hasManifest(e)?this.run(["run"],e):this.missingManifest()}async runTest(e){return this.hasManifest(e)?this.run(["test","--all-targets"],e):this.missingManifest()}async runBuild(e){return this.hasManifest(e)?this.run(["build","--release"],e):this.missingManifest()}async runStart(e){return this.hasManifest(e)?this.run(["run","--release"],e):this.missingManifest()}async runLint(e){return this.hasManifest(e)?this.run(["clippy","--all-targets","--all-features","--","-D","warnings"],e):this.missingManifest()}async runFormat(e){return this.hasManifest(e)?this.run(["fmt","--all"],e):this.missingManifest()}async doctorHints(e){return ["Install the Rust toolchain with rustup and ensure cargo is on PATH.","Use Cargo.lock for deterministic application builds.","Install rustfmt and clippy components for format and lint lifecycle commands."]}};function zm(){let t={...process.env},e=t.PATH||"";if(e){let r=e.split(P.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(P.delimiter);t.PATH=r;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||i$4(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function Ye(t,e){return t==="go"?new un((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="node"?new gn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="java"?new mn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="dotnet"?new dn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="rust"?new yn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="php"?new wn((r,o,n)=>e.runCommandInCwd(r,o,n)):new hn((r,o)=>e.runCoreRapidkit(r,{cwd:o,env:zm()}))}var Up=P.join(ha.homedir(),".workspai","cache"),Bp=1440*60*1e3;function Za(){let t=f$3("CACHE_DIR");if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?P.join(Up,`vitest-${e}`):Up}var vn=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return P.join(Za(),`${this.getCacheKey(e)}.json`)}getTempCachePath(e){let r=`${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;return `${e}.${r}.tmp`}async get(e$1,r="1.0"){let o=this.memoryCache.get(e$1);if(o&&o.version===r&&Date.now()-o.timestamp<Bp)return e.debug(`Cache hit (memory): ${e$1}`),o.data;try{let n=this.getCachePath(e$1),a=await promises.readFile(n,"utf-8"),i=JSON.parse(a);if(i.version===r&&Date.now()-i.timestamp<Bp)return e.debug(`Cache hit (disk): ${e$1}`),this.memoryCache.set(e$1,i),i.data;await promises.unlink(n).catch(()=>{});}catch{e.debug(`Cache miss: ${e$1}`);}return null}async set(e$1,r,o="1.0"){let n={data:r,timestamp:Date.now(),version:o};this.memoryCache.set(e$1,n);try{await promises.mkdir(Za(),{recursive:true});let a=this.getCachePath(e$1),i=this.getTempCachePath(a);await promises.writeFile(i,JSON.stringify(n),"utf-8"),await promises.rename(i,a),e.debug(`Cache set: ${e$1}`);}catch(a){e.debug(`Cache write failed: ${e$1}`,a);}}async invalidate(e$1){this.memoryCache.delete(e$1);try{let r=this.getCachePath(e$1);await promises.unlink(r),e.debug(`Cache invalidated: ${e$1}`);}catch{}}async clear(){this.memoryCache.clear();try{let e$1=Za(),r=await promises.readdir(e$1);await Promise.all(r.map(o=>promises.unlink(P.join(e$1,o)))),e.debug("Cache cleared");}catch{}}};function qp(t){let e=C(t);return e?`Workspai project found at ${e}, but no Python virtual environment or activation script is available.`:"No Workspai project metadata, Python virtual environment, or activation script was found in this directory or its parents."}function Ne(t,e,r,o,n="process",a){return {id:t,label:e,order:r,layoutHint:n,...o?{parentId:o}:{},...a?{group:a}:{}}}function Qm(t){return t.slice(1).map((e,r)=>{let o=t[r];return {id:`${o.id}->${e.id}`,from:o.id,to:e.id,kind:e.layoutHint==="gate"?"gate":e.layoutHint==="sink"?"handoff":"sequence",order:r+1}})}var Zm=[["workspace.intelligence.preflight.sync","Sync","source","DISCOVER"],["workspace.intelligence.stage.model","Model + Graph","process","UNDERSTAND"],["workspace.intelligence.preflight.baseline","Baseline","process","UNDERSTAND"],["workspace.intelligence.stage.diff","Diff","process","UNDERSTAND"],["workspace.intelligence.stage.impact","Impact","process","UNDERSTAND"],["workspace.intelligence.stage.doctor-evidence","Doctor","gate","ASSURE"],["workspace.intelligence.stage.contract-evidence","Contracts","gate","ASSURE"],["workspace.intelligence.stage.analyze-evidence","Analyze","gate","ASSURE"],["workspace.intelligence.stage.readiness-evidence","Readiness","gate","ASSURE"],["workspace.intelligence.stage.verify","Verify","gate","ASSURE"],["workspace.intelligence.stage.context","Context","process","PUBLISH"],["workspace.intelligence.stage.agent-sync","Agent Sync","process","PUBLISH"],["workspace.intelligence.stage.explain","Explain","sink","PUBLISH"]];function oo(t,e,r){return {id:t,version:3,nodes:[e,...r],edges:Qm(r)}}function zp(t){let e=t.filter(a=>!a.startsWith("-")&&/^[a-z][a-z0-9-]*$/i.test(a)).slice(0,3),r=e.slice(0,3).join(".")||"cli",o=`command.${r}`,n=Ne(o,e.join(" ")||"Workspai command",0,void 0,"source");if(e[0]==="workspace"&&e[1]==="intelligence"){let a=Zm.map(([i,c,l,p],g)=>Ne(i,c,g+1,o,l,p));return oo(`cli.${r}`,n,a)}return e[0]==="adopt"?oo(`cli.${r}`,n,[Ne("adopt.resolve","Resolve",1,o,"source","DISCOVER"),Ne("adopt.detect","Detect",2,o,"process","DISCOVER"),Ne("adopt.link","Link",3,o,"process","CONNECT"),Ne("adopt.publish","Seal Intelligence",4,o,"gate","PUBLISH"),Ne("adopt.ground","Agent Entry",5,o,"sink","PUBLISH")]):e[0]==="workspace"&&e[1]==="run"?oo(`cli.${r}`,n,[Ne("workspace.run.resolve","Resolve Fleet",1,o,"source","DISCOVER"),Ne("workspace.run.gates","Gates",2,o,"gate","ASSURE"),Ne("workspace.run.execute","Execute",3,o,"process","EXECUTE"),Ne("workspace.run.publish","Publish",4,o,"sink","PUBLISH")]):e[0]==="doctor"?oo(`cli.${r}`,n,[Ne("doctor.observe","Observe",1,o,"source","OBSERVE"),Ne("doctor.diagnose","Diagnose",2,o,"process","DIAGNOSE"),Ne("doctor.plan","Plan",3,o,"process","DECIDE"),Ne("doctor.verify","Verify",4,o,"gate","VERIFY")]):e[0]==="workspace"&&e[1]==="repair"?oo(`cli.${r}`,n,[Ne("repair.observe","Observe",1,o,"source","OBSERVE"),Ne("repair.plan","Plan",2,o,"process","DECIDE"),Ne("repair.authorize","Authorize",3,o,"gate","AUTHORIZE"),Ne("repair.execute","Execute",4,o,"process","EXECUTE"),Ne("repair.verify","Verify",5,o,"gate","VERIFY")]):{id:`cli.${r}`,version:3,nodes:[n],edges:[]}}var no=["list","sync","registry","foundation","intelligence","model","snapshot","diff","impact","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp","policy","contract","share","export","archive","hydrate","import","connect","run","init"],Pn=["intelligence","model","snapshot","diff","impact","contract","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp"];function Yp(t){return Pn.includes(t)}var Xp="workspai-project-entry-capability-v1";var es="workspai-cli-runtime-command-inventory-v1",jn=[...w$2,"autopilot","pipeline","import","adopt","goal","change","agent","snapshot","live","bootstrap","setup","cache","mirror","ai","config","product","infra","shell","commands","create","project"],ts=["bootstrap","setup","cache","mirror"],bn="create",eg=[...ts,bn],tg={bootstrap:"Bootstrap project or workspace dependencies through runtime-aware setup rules.",setup:"Prepare a selected runtime toolchain through the supported adapter boundary.",cache:"Inspect or clear Workspai cache state through the managed cache boundary.",mirror:"Coordinate supported mirror lifecycle operations for the current project.",create:"Create a supported workspace or project through the canonical planner boundary."},Cn=[["ai","generate-embeddings"],["ai","info"],["ai","recommend"],["ai","update-embeddings"],["agent","bootstrap"],["agent","framework"],["agent","framework","list"],["agent","framework","plan"],["agent","framework","attach"],["agent","framework","apply"],["config","ai"],["config","remove-api-key"],["config","set-api-key"],["config","show"],["change","begin"],["change","list"],["change","predict"],["change","authorize"],["change","resume"],["change","effect"],["change","effect","record"],["change","verification"],["change","verification","record"],["change","status"],["change","explain"],["change","verify"],["change","abort"],["change","capsule"],["change","capsule","validate"],["change","capsule","export"],["infra","down"],["infra","plan"],["infra","status"],["infra","up"],["product","manifest"],["product","manifest","create"],["product","plan"],["project","commands"],["project","agent-entry"],["project","coverage"],["project","workspace"],["project","archives"],["project","archive"],["project","restore"],["project","delete"],["snapshot","create"],["snapshot","inspect"],["snapshot","list"],["snapshot","restore"]];function rg(t,e,r,o){let n=new Set(t),a=new Set(e),i=t.filter(f=>!a.has(f)).sort(),c=e.filter(f=>!n.has(f)).sort(),l=new Set(r),p=new Set(o),g=r.filter(f=>!p.has(f)).sort(),u=o.filter(f=>!l.has(f)).sort();return {ok:i.length===0&&c.length===0&&g.length===0&&u.length===0,registeredButUndeclared:i,declaredButUnregistered:c,registeredScopedButUndeclared:g,declaredScopedButUnregistered:u}}function Qp(t,e=[]){return t.commands.flatMap(r=>{let o=r.name(),n=[...e,o];return [{path:n,command:o,parent:e.length>0?e.join(" "):null,registrationKind:"commander",aliases:r.aliases?.()??[],description:r.description?.()??"",hidden:r._hidden===true,arguments:(r.registeredArguments??[]).map(i=>({name:i.name(),required:i.required,variadic:i.variadic})),options:(r.options??[]).map(i=>({flags:i.flags,attributeName:i.attributeName?.()??null}))},...Qp(r,n)]})}function Zp(t){let e=Qp(t),r=e.filter(c=>c.path.length===1).map(c=>c.command),o=new Set(r),n=eg.filter(c=>!o.has(c)).map(c=>({path:[c],command:c,parent:null,registrationKind:"manual-handler",aliases:[],description:tg[c],hidden:false,arguments:[],options:[]})),a=[...e,...n].sort((c,l)=>c.path.join(" ").localeCompare(l.path.join(" "))),i=[...new Set(a.filter(c=>c.path.length===1).map(c=>c.command))].sort();return {schemaVersion:es,commands:a,topLevelCommands:i,integrity:rg(i,jn,e.filter(c=>c.path.length>1).map(c=>c.path.join(" ")),Cn.map(c=>c.join(" ")))}}function ed(t){return `CLI command surface integrity violation (${[t.registeredButUndeclared.length>0?`registered but undeclared: ${t.registeredButUndeclared.join(", ")}`:null,t.declaredButUnregistered.length>0?`declared but unreachable: ${t.declaredButUnregistered.join(", ")}`:null,t.registeredScopedButUndeclared.length>0?`registered scoped but undeclared: ${t.registeredScopedButUndeclared.join(", ")}`:null,t.declaredScopedButUnregistered.length>0?`declared scoped but unreachable: ${t.declaredScopedButUnregistered.join(", ")}`:null].filter(r=>r!==null).join("; ")})`}var og={"--workspace":"Use an explicit workspace root instead of the nearest workspace.","--json":"Emit machine-readable JSON.","--strict":"Return a non-zero exit when governed evidence blocks the result.","--for-agent":"Build output for an agent surface (for example codex, copilot, or cursor).","--include-paths":"Include absolute filesystem paths.","--include-evidence":"Read and include referenced evidence metadata.","--scan-depth":"Set the bounded observable-project discovery depth.","--cache":"Reuse the model cache when the structural inputs are unchanged.","--refresh-graph":"Bypass the compatible persisted graph and rebuild from live sources.","--incremental":"Reuse unchanged projects and rebuild affected graph relations.","--write":"Persist the command artifact under .workspai/reports.","--scope":"Limit the operation to a bounded scope such as project:<name>.","--kind":"Limit graph entity search to one canonical entity kind.","--dry-run":"Preview the operation without applying writes.","--preset":"Select the generated agent customization preset.","--refresh-context":"Rebuild agent context before synchronization.","--refresh":"Refresh the underlying registry or context before reading it.","--agent-sync":"Synchronize agent grounding after writing the context artifact.","--no-agent-sync":"Do not synchronize agent grounding after writing context.","--target":"Select one or more agent customization targets.","--experimental-hooks":"Generate advisory VS Code agent hook design files.","--hydrate-prompts":"Add workspace-specific verification steps to supported prompts.","--project-grounding":"Select the project entrypoint policy: managed, local, or off.","--ci":"Produce a CI-oriented command plan.","--from":"Read the specified baseline, report, or graph artifact.","--from-impact":"Read the specified impact report for verification.","--output":"Write the requested export or report to this path.","--limit":"Bound graph query results (1\u2013100).","--once":"Build the initial observed state and exit.","--graph-stream":"Emit graph snapshot/delta events as NDJSON.","--force":"Replace an existing generated target where supported.","--no-doctor":"Exclude Doctor evidence from a share bundle.","--no-blueprint":"Exclude the reproducibility blueprint from a share bundle.","--include-env":"Include private environment files in an export archive.","--archive-compression":"Select the archive compression format.","--max-download-size":"Bound a remote archive download.","--max-expanded-size":"Bound the expanded archive size.","--download-timeout-ms":"Bound remote archive download time.","--allow-private-network":"Allow private-network archive sources explicitly.","--affected":"Run only projects affected by the selected Git change.","--blast-radius":"Include transitive downstream dependents.","--since":"Select the Git baseline used for affected-project discovery.","--parallel":"Run selected projects concurrently.","--plan":"Resolve lifecycle commands without executing project code.","--runtime":"Limit lifecycle planning or execution to one detected runtime family.","--max-workers":"Bound concurrent project workers.","--continue-on-error":"Continue remaining projects after a project failure.","--reuse-passed":"Reuse successful project-stage results where safe.","--no-gates":"Skip Doctor and Readiness pre-run gates.","--allow-breaking":"Allow a verified goal to use breaking dependency changes.","--allow-force":"Allow a verified goal to use force-based repair commands.","--card":"Select the dashboard card whose governed remediation actions should be repaired.","--action-id":"Select one exact governed remediation action.","--project":"Limit the repair transaction to one registered project name.","--proposal":"Read a bounded model repair proposal from a JSON file inside the workspace.","--transaction":"Select one durable repair transaction by id.","--approved-by":"Record the local actor approving the immutable repair plan.","--decision":"Submit one of the exact options exposed by a decision-required transaction.","--max-risk":"Set the maximum approved repair risk: safe, guarded, or invasive.","--no-auto-rollback":"Require a decision instead of automatically restoring a failed transaction.","--no-build":"Do not require build validation for the selected verified goal.","--no-tests":"Do not require test validation for the selected verified goal.","--no-run":"Read current goal evidence without executing verification commands.","--reuse-intelligence":"Reuse a just-completed canonical intelligence run while executing goal-specific checks."},ao={list:{usage:"workspai workspace list [--json]",summary:"List registered Workspai workspaces.",flags:["--json"],examples:["workspai workspace list","workspai workspace list --json"]},intelligence:{usage:"workspai workspace intelligence run [--for-agent <agent>] [--strict] [--json]",summary:"Run the canonical Workspace Intelligence chain in contract order.",flags:["--workspace","--json","--strict","--for-agent"],subactions:["run"],artifact:p.intelligenceRun,examples:["workspai workspace intelligence run --strict","workspai workspace intelligence run --for-agent codex --json"]},model:{usage:"workspai workspace model [--cache|--incremental] [--write] [--strict] [--json]",summary:"Build the canonical workspace model from registered and observed sources.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth","--cache","--incremental","--write","--strict"],artifact:p.model,examples:["workspai workspace model --write --json","workspai workspace model --incremental --write --json"]},"agent-sync":{usage:"workspai workspace agent-sync [--for-agent <agent>] [--target <targets>] [--project-grounding <mode>] [--write]",summary:"Synchronize bounded workspace grounding for supported agent surfaces.",flags:["--workspace","--json","--scope","--for-agent","--write","--dry-run","--strict","--preset","--refresh-context","--refresh","--target","--experimental-hooks","--hydrate-prompts","--project-grounding"],artifact:p.agentCustomizationPack,examples:["workspai workspace agent-sync --target all --write --strict","workspai workspace agent-sync --for-agent copilot --dry-run --json"]},"remediation-plan":{usage:"workspai workspace remediation-plan [--ci] [--write] [--json]",summary:"Build a governed repair plan from current workspace evidence.",flags:["--workspace","--json","--include-paths","--ci","--write"],artifact:t.artifactRemediationPlan,examples:["workspai workspace remediation-plan --write --json","workspai workspace remediation-plan --ci --json"]},repair:{usage:"workspai workspace repair <capabilities|plan|propose|approve|decide|execute|resume|status|list|rollback|cancel> [--transaction <id>] [--json]",summary:"Run a durable, approval-bound repair transaction through checkpoint, validation, canonical verification, and rollback.",flags:["--workspace","--json","--card","--action-id","--project","--proposal","--transaction","--approved-by","--decision","--max-risk","--allow-breaking","--allow-force","--no-auto-rollback"],subactions:["capabilities","plan","propose","approve","decide","execute","resume","status","list","rollback","cancel"],artifact:p.repairTransaction,examples:["workspai workspace repair capabilities --json","workspai workspace repair plan --card doctor --project api --json","workspai workspace repair propose --proposal .workspai/repair/inbox/proposal.json --json","workspai workspace repair approve --transaction repair_123 --approved-by local-user --json","workspai workspace repair decide --transaction repair_123 --decision approve-invasive --json","workspai workspace repair execute --transaction repair_123 --json","workspai workspace repair rollback --transaction repair_123 --json"]},context:{usage:"workspai workspace context [--for-agent <agent>] [--scope <scope>] [--write] [--json]",summary:"Build a bounded, evidence-backed context pack for people and agents.",flags:["--workspace","--json","--for-agent","--scope","--include-evidence","--scan-depth","--write","--agent-sync","--no-agent-sync","--preset","--target","--strict","--project-grounding"],artifact:p.agentContext,examples:["workspai workspace context --for-agent codex --write --json","workspai workspace context --scope project:api --json"]},snapshot:{usage:"workspai workspace snapshot [--json]",summary:"Persist the current model as the comparison baseline.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth"],artifact:p.snapshot,examples:["workspai workspace snapshot --json"]},diff:{usage:"workspai workspace diff --from <snapshot-or-model|git[:ref]> [--strict] [--json]",summary:"Compare the current model with a trusted model baseline.",flags:["--workspace","--json","--from","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.diff,examples:["workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","workspai workspace diff --from git --json"]},impact:{usage:"workspai workspace impact --from <diff> [--scope <scope>] [--strict] [--json]",summary:"Calculate the evidence-backed blast radius of the current model change.",flags:["--workspace","--json","--from","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.impact,examples:["workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json","workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --strict --json"]},verify:{usage:"workspai workspace verify [--from-impact <impact-report>] [--scope <scope>] [--strict] [--json]",summary:"Verify the selected change against contracts, gates, and current evidence.",flags:["--workspace","--json","--from-impact","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.verify,examples:["workspai workspace verify --strict --json","workspai workspace verify --from-impact .workspai/reports/workspace-impact-last-run.json --json"]},goal:{usage:"workspai workspace goal <plan|status|verify> <kind|goal-id> [--scope <scope>] [--runtime <runtime>] [--target <percent>] [--json]",summary:"Plan, resume, and evidence-verify a durable engineering goal for people and agents.",flags:["--workspace","--json","--scope","--runtime","--target","--allow-breaking","--allow-force","--no-build","--no-tests","--no-run","--reuse-intelligence"],flagDescriptions:{"--runtime":"Select the runtime measured by a test-coverage goal.","--target":"Set the required test coverage percentage (0\u2013100)."},subactions:["plan","status","verify"],artifact:p.verifiedGoalStatus,examples:["workspai workspace goal plan release-readiness --json","workspai workspace goal plan dependency-security --scope project:api --json","workspai workspace goal plan test-coverage --scope project:web --runtime node --target 75 --json","workspai workspace goal verify <goal-id> --json"]},graph:{usage:"workspai workspace graph [mode] [query|from] [to] [--json]",summary:"Query and export the canonical Knowledge Graph; explain, dot, and mermaid target the project dependency topology.",flags:["--workspace","--json","--output","--from","--limit","--kind","--refresh-graph","--include-paths","--include-evidence","--scan-depth","--scope","--write"],subactions:["emit","explain","entities","search","evidence","path","overlay","benchmark","benchmark-suite","dot","mermaid","jsonld","graphml","gexf"],examples:['workspai workspace graph search "authentication endpoint" --kind endpoint --limit 12 --json','workspai workspace graph evidence "GET /users" --json',"workspai workspace graph benchmark-suite agent-core.v1 --write --json","workspai workspace graph mermaid"]},watch:{usage:"workspai workspace watch [--once] [--graph-stream] [--json]",summary:"Observe model changes and optionally stream graph deltas.",flags:["--workspace","--json","--once","--graph-stream","--scan-depth"],examples:["workspai workspace watch --once --json","workspai workspace watch --graph-stream"]},sync:{usage:"workspai workspace sync [--project-grounding <mode>] [--json]",summary:"Synchronize canonical workspace registration and project metadata.",flags:["--workspace","--json","--project-grounding"],examples:["workspai workspace sync --json"]},registry:{usage:"workspai workspace registry [--refresh] [--json]",summary:"Inspect the canonical workspace registry summary.",flags:["--workspace","--json","--refresh"],examples:["workspai workspace registry --refresh --json"]},foundation:{usage:"workspai workspace foundation [--force] [--json]",summary:"Create or repair the standard workspace foundation files.",flags:["--workspace","--json","--force"],examples:["workspai workspace foundation --json"]},policy:{usage:"workspai workspace policy [show|status|get|set] [key] [value] [--json]",summary:"Inspect or update workspace governance policy.",flags:["--workspace","--json"],subactions:["show","status","get","set"],examples:["workspai workspace policy get --json"]},contract:{usage:"workspai workspace contract [init|inspect|sync|verify|graph] [--strict] [--json]",summary:"Create, inspect, synchronize, verify, or project the workspace contract.",flags:["--workspace","--json","--output","--force","--strict"],subactions:["init","inspect","sync","verify","graph"],artifact:t.workspaceContract,examples:["workspai workspace contract sync --strict --json","workspai workspace contract verify --strict --json","workspai workspace contract graph --json"]},share:{usage:"workspai workspace share [--output <file>] [--json]",summary:"Create a bounded, shareable workspace evidence bundle.",flags:["--workspace","--json","--output","--include-paths","--no-doctor","--no-blueprint"],examples:["workspai workspace share --output workspace-share.json --json"]},export:{usage:"workspai workspace export [--output <archive>] [--archive-compression <format>]",summary:"Export a portable workspace archive.",flags:["--workspace","--json","--output","--include-env","--archive-compression"],examples:["workspai workspace export --output workspace.tar.gz"]},archive:{usage:"workspai workspace archive <inspect|verify|doctor> <source> [safety options] [--json]",summary:"Inspect, verify, or diagnose a portable workspace archive without materializing it.",flags:["--json","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],subactions:["inspect","verify","doctor"],examples:["workspai workspace archive inspect ./workspace.tar.gz --json","workspai workspace archive verify ./workspace.tar.gz --strict --json","workspai workspace archive doctor ./workspace.tar.gz --json"]},hydrate:{usage:"workspai workspace hydrate <source> [--output <directory>] [--dry-run] [--json]",summary:"Hydrate a portable workspace into a controlled destination.",flags:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace hydrate workspace.tar.gz --output ./restored --dry-run --json"]},import:{usage:"workspai workspace import <source> [--output <directory>] [--dry-run] [--json]",summary:"Verify, materialize, register, relink, and reconcile a portable workspace archive safely.",flags:["--json","--output","--dry-run","--strict","--project-grounding","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace import workspace.tar.gz --output ./imported --json"]},connect:{usage:"workspai workspace connect [directory] [--project-grounding <mode>] [--dry-run] [--json]",summary:"Register and reconcile an existing Workspai workspace in place without moving its source.",flags:["--json","--dry-run","--project-grounding"],examples:["workspai workspace connect /path/to/existing-workspace --json"]},run:{usage:"workspai workspace run <stage> [selection and concurrency options] [--json]",summary:"Run a lifecycle stage across selected workspace projects.",flags:["--workspace","--json","--scope","--plan","--runtime","--affected","--blast-radius","--since","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],subactions:["init","test","build","start","<custom-from-context>"],artifact:t.workspaceRunLast,examples:["workspai workspace run test --scope project:api --plan --runtime ruby --json","workspai workspace run test --affected --blast-radius --strict","workspai workspace run build --parallel --max-workers 4 --json"]},explain:{usage:"workspai workspace explain [target] [--scope <scope>] [--write] [--json]",summary:"Explain current blockers or a selected workspace target from evidence.",flags:["--workspace","--json","--scope","--write"],artifact:p.explain,examples:["workspai workspace explain --write --json"]},why:{usage:"workspai workspace why [target] [--scope <scope>] [--write] [--json]",summary:"Alias the evidence-backed workspace explanation flow.",flags:["--workspace","--json","--scope","--write"],artifact:d$5,examples:["workspai workspace why readiness --json"]},trace:{usage:"workspai workspace trace --from <diff-artifact> [--write] [--json]",summary:"Trace a model change through blast radius and decision gates.",flags:["--workspace","--json","--from","--write"],artifact:e$3,examples:["workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --write --json"]},feedback:{usage:"echo '<event-json>' | workspai workspace feedback record --json",summary:"Record a structured outcome event for the workspace intelligence history.",flags:["--workspace","--json"],subactions:["record"],examples:[`echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | workspai workspace feedback record --json`]},eval:{usage:"workspai workspace eval [init|record|status|report|compare] [arguments] [--json]",summary:"Measure agent/model calls, tool use, tokens, latency, and verified outcome.",flags:["--workspace","--json","--from","--output"],subactions:["init","record","status","report","compare"],artifact:p.evaluationLastRun,examples:["workspai workspace eval init repair-readiness workspace-intelligence --json","workspai workspace eval report --output ./evaluation.json --json"]},mcp:{usage:"workspai workspace mcp serve",summary:"Serve bounded, read-mostly workspace evidence over stdio MCP.",flags:["--workspace","--json"],subactions:["serve"],examples:["workspai workspace mcp serve"]},init:{usage:"workspai workspace init [selection and concurrency options] [--json]",summary:"Initialize all selected projects through the workspace fleet runner.",flags:["--workspace","--json","--scope","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],artifact:t.workspaceRunLast,examples:["workspai workspace init --parallel --strict"]}};function rs(t){if(t)return ao[t]}function td(t){return t[0]==="workspace"&&!!rs(t[1])&&t.slice(2).some(e=>e==="--help"||e==="-h")}function rd(t,e){let r=rs(e)?.flagDescriptions?.[t]??og[t];if(!r)throw new Error(`Workspace action flag has no description: ${t}`);return r}function od(t){let e=rs(t);if(!e)throw new Error(`Unknown workspace action: ${t}`);let r=[`Workspai workspace ${t}`,"",e.summary,"","Usage:",`  ${e.usage}`];if(e.subactions&&e.subactions.length>0&&r.push("","Modes:",`  ${e.subactions.join(" | ")}`),e.flags.length>0){r.push("","Options:");for(let o of e.flags){let n=rd(o,t);r.push(`  ${o.padEnd(24)} ${n}`.trimEnd());}}return e.artifact&&r.push("","Evidence:",`  ${e.artifact}`),r.push("","Examples:",...e.examples.map(o=>`  ${o}`),""),r.join(`
-`)}var nd="rapidkit-runtime-command-surface-v1";var os=s$2.doctorRemediationPlan.schemaVersion;var ad="workspai-workspace-intelligence-architecture-v1";var sd={autopilotRelease:s$2.autopilotReleaseLastRun.schemaVersion,workspaceList:"rapidkit-workspace-list-v1",workspaceSync:"rapidkit-workspace-sync-v1",compatibilityMatrix:s$2.compatibilityMatrix.schemaVersion,mcpDesign:s$2.workspaiMcpDesign.schemaVersion,agentHooks:s$2.agentHooks.schemaVersion,projectArchive:"rapidkit-project-archive-v1",workspaceSnapshot:"rapidkit-workspace-snapshot-v1",workspaceSnapshotV2:"rapidkit-workspace-snapshot-v2",infraPlan:s$2.infraPlan.schemaVersion,privateProductManifest:"rapidkit.private-product-manifest.v1",productFactoryPlan:"rapidkit.product-factory-plan.v1",workspaceModelCache:s$2.workspaceModelCache.schemaVersion,workspaceWatchEvent:"workspace-watch-event.v1",doctorProjectScan:"doctor-project-scan-v2",doctorWorkspaceCache:s$2.doctorWorkspaceCache.schemaVersion};var id="project-workspace-resolution.v1";function cd(t){a$4(t,"contracts/project-workspace-resolution.v1.json","Project workspace resolution");}var ns="workspai.ingestion-plan.v1",Sn="workspai.ingestion-result.v1",En="workspai.adopt-effects.v1";var ld="contracts/ingestion-result.v1.json";function Ut(t){return {schemaVersion:ns,...t}}var ng="workspai-published-contract-catalog-v1",ag="workspace-graph-stream.v1";function so(){return {workspaceContract:1,runtimeCommandSurface:nd,cliRuntimeCommandInventory:es,cliOperationResult:a$L,publishedContractCatalog:ng,workspaceArchiveCapabilities:a$K,workspaceArchiveManifest:b$k,workspaceArchiveOperationResult:c$3,ingestionPlan:ns,ingestionResult:Sn,adoptEffects:En,projectEntryCapability:Xp,projectWorkspaceLink:s$2.projectWorkspaceLink.schemaVersion,projectWorkspaceResolution:id,projectContextAgent:s$2.projectContextAgent.schemaVersion,projectKnowledgeGraphReference:s$2.projectKnowledgeGraphReference.schemaVersion,projectAgentEntry:a$J,agentBootstrapReceipt:c$g,doctorProjectEvidence:b$j,doctorWorkspaceEvidence:a$I,doctorGraphDiagnosis:b$i,doctorDiagnosis:a$H,doctorCapabilities:a$G,doctorValidation:c$f,doctorReceipt:s$2.doctorReceipt.schemaVersion,doctorSummary:c$e,projectTestCoverage:s$2.projectTestCoverage.schemaVersion,verifiedGoal:"workspai.verified-goal.v1",verifiedGoalStatus:q.verifiedGoalStatus,goalPack:a$F,goalAgentHandoff:b$h,goalPlanResult:c$d,goalIndex:e$c,goalLifecycleResult:g$8,decisionEvent:f$5,decisionTransaction:e$b,decisionCheckpoint:g$7,changeOperationResult:l$3,architectureChangeLease:h$3,predictedArchitectureChange:i$2,architectureSurpriseReport:j$7,proofCarryingChangeCapsule:k$4,proofCarryingChangeList:m$5,proofCarryingChangeCapsuleValidation:n$4,proofCarryingChangeCapsuleExport:o$4,workspaceIntelligenceArchitecture:ad,workspaceIntelligenceChain:a$E,workspaceIntelligenceArtifacts:q,cliLogEvent:a$D,workspaceActivityEvent:a$C,workspaceActivityMonitorSnapshot:a$B,workspaceActivityMonitorFleet:b$g,workspaceActivityBoard:h$2,freshnessMetadata:c$c,factFreshness:e$a,blockerResolution:a$A,workspaceModel:l$2,workspaceImpact:f$4,workspaceVerify:c$b,workspaceContext:a$z,workspaceDependencyGraph:e$9,workspaceKnowledgeGraph:a$y,workspaceGraphStream:ag,workspaceKnowledgeGraphChangeOverlay:a$x,workspaceKnowledgeSearch:a$w,workspaceGraphTokenEfficiency:a$v,workspaceIntelligenceBenchmark:a$u,modelUsageEvent:a$t,workspaceIntelligenceEvaluation:b$f,workspaceIntelligenceEvaluationComparison:c$a,workspaceIntelligenceHistory:a$s,agentCustomizationPackCapabilities:c$9,agentFrameworkCapabilities:v$2,agentFrameworkAdapterManifest:w$1,agentFrameworkConformanceReport:x,agentFrameworkChangePlan:y,agentFrameworkOwnershipReceipt:z,agentFrameworkAdmissionCandidate:A,agentCustomizationPackReport:q.agentCustomizationPack,agentReportsIndex:q.agentIndex,workspaceOperationalSkill:a$r,workspaceSkillsIndex:b$e,workspaceExplain:a$q,agentActionOutcome:a$p,doctorRemediationPlan:os,doctorDependencyRepairTransaction:"workspai.doctor-dependency-repair-transaction.v1",artifactRemediationPlan:a$o,studioCardRepairCapabilities:j$6,workspaceRepairProposal:e$8,workspaceRepairCapabilities:g$6,workspaceRepairTransaction:a$n,doctorFixResult:a$m,backendImportStackParitySnapshot:"backend-import-stack-parity-v1",bootstrapCompliance:s$2.bootstrapCompliance.schemaVersion,commandCapabilities:"rapidkit-command-capabilities-v1",createPlannerCapabilities:"rapidkit-create-planner-capabilities-v1",doctorRemediationPlanLegacy:os,extensionCliCompatibility:"rapidkit-extension-cli-compatibility.v1",infraStack:"rapidkit.infra-stack.v1",mirrorOps:s$2.mirrorOps.schemaVersion,moduleLayout:"rapidkit.module-layout.v1",moduleSupport:"rapidkit-module-support-v1",pipelineLastRun:s$2.pipelineLastRun.schemaVersion,transparencyEvidence:s$2.transparencyEvidence.schemaVersion,version:"rapidkit-version-v1",studioBlockerHandoff:"rapidkit-studio-blocker-handoff-v1",workspaceRegistry:s$2.workspaceRegistry.schemaVersion,workspaceRunLast:s$2.workspaceRunLast.schemaVersion,workspaceShareBundle:s$2.workspaceShareBundle.schemaVersion,...sd}}function An(){let t=so(),e={workspaceContract:"contracts/workspace-contract.v1.json",runtimeCommandSurface:"contracts/runtime-command-surface.v1.json",cliRuntimeCommandInventory:"contracts/cli-runtime-command-inventory.v1.snapshot.json",cliOperationResult:"contracts/cli-operation-result.v1.json",publishedContractCatalog:"contracts/published-contract-catalog.v1.json",workspaceArchiveCapabilities:"contracts/workspace-archive-capabilities.v1.json",workspaceArchiveManifest:"contracts/workspace-archive-manifest.v1.json",workspaceArchiveOperationResult:"contracts/workspace-archive-operation-result.v1.json",ingestionPlan:"contracts/ingestion-plan.v1.json",ingestionResult:"contracts/ingestion-result.v1.json",adoptEffects:"contracts/adopt-effects.v1.json",projectEntryCapability:"contracts/project-entry-capability.v1.json",projectWorkspaceLink:"contracts/project-workspace-link.v1.json",projectWorkspaceResolution:"contracts/project-workspace-resolution.v1.json",projectContextAgent:"contracts/workspace-intelligence/project-context-agent.v1.json",projectKnowledgeGraphReference:"contracts/workspace-intelligence/project-knowledge-graph-reference.v1.json",projectAgentEntry:"contracts/workspace-intelligence/project-agent-entry.v1.json",agentBootstrapReceipt:"contracts/workspace-intelligence/agent-bootstrap-receipt.v1.json",doctorProjectEvidence:"contracts/doctor-project-evidence.v1.json",doctorWorkspaceEvidence:"contracts/doctor-workspace-evidence.v1.json",doctorGraphDiagnosis:"contracts/workspace-intelligence/doctor-graph-diagnosis.v1.json",doctorDiagnosis:"contracts/workspace-intelligence/doctor-diagnosis.v1.json",doctorCapabilities:"contracts/workspace-intelligence/doctor-capabilities.v1.json",doctorValidation:"contracts/workspace-intelligence/doctor-validation.v1.json",doctorReceipt:"contracts/workspace-intelligence/doctor-receipt.v1.json",doctorSummary:"contracts/workspace-intelligence/doctor-summary.v1.json",projectTestCoverage:"contracts/project-test-coverage.v1.json",verifiedGoal:"contracts/workspace-intelligence/verified-goal.v1.json",verifiedGoalStatus:"contracts/workspace-intelligence/verified-goal-status.v1.json",goalPack:"contracts/workspace-intelligence/goal-pack.v1.json",goalAgentHandoff:"contracts/workspace-intelligence/goal-agent-handoff.v1.json",goalPlanResult:"contracts/workspace-intelligence/goal-plan-result.v1.json",goalIndex:"contracts/workspace-intelligence/goal-index.v1.json",goalLifecycleResult:"contracts/workspace-intelligence/goal-lifecycle-result.v1.json",decisionEvent:"contracts/workspace-intelligence/decision-event.v1.json",decisionTransaction:"contracts/workspace-intelligence/decision-transaction.v1.json",decisionCheckpoint:"contracts/workspace-intelligence/decision-checkpoint.v1.json",changeOperationResult:"contracts/workspace-intelligence/change-operation-result.v1.json",architectureChangeLease:"contracts/workspace-intelligence/architecture-change-lease.v1.json",predictedArchitectureChange:"contracts/workspace-intelligence/predicted-architecture-change.v1.json",architectureSurpriseReport:"contracts/workspace-intelligence/architecture-surprise-report.v1.json",proofCarryingChangeCapsule:"contracts/workspace-intelligence/proof-carrying-change-capsule.v1.json",proofCarryingChangeList:"contracts/workspace-intelligence/proof-carrying-change-list.v1.json",proofCarryingChangeCapsuleValidation:"contracts/workspace-intelligence/proof-carrying-change-capsule-validation.v1.json",proofCarryingChangeCapsuleExport:"contracts/workspace-intelligence/proof-carrying-change-capsule-export.v1.json",workspaceIntelligenceArchitecture:"contracts/workspace-intelligence-architecture.v1.json",workspaceIntelligenceChain:"contracts/workspace-intelligence-chain.v1.json",workspaceIntelligenceArtifacts:null,cliLogEvent:"contracts/cli-log-event.v1.json",workspaceActivityEvent:"contracts/workspace-activity-event.v1.json",workspaceActivityMonitorSnapshot:"contracts/workspace-activity-monitor-snapshot.v1.json",workspaceActivityMonitorFleet:"contracts/workspace-activity-monitor-fleet.v1.json",workspaceActivityBoard:"contracts/workspace-activity-board.v1.json",freshnessMetadata:null,factFreshness:"contracts/workspace-intelligence/fact-freshness.v1.json",blockerResolution:"contracts/workspace-intelligence/blocker-resolution.v1.json",workspaceModel:"contracts/workspace-intelligence/workspace-model.v1.json",workspaceImpact:"contracts/workspace-intelligence/workspace-impact.v1.json",workspaceVerify:"contracts/workspace-intelligence/workspace-verify.v1.json",workspaceContext:"contracts/workspace-intelligence/workspace-context.v1.json",workspaceDependencyGraph:"contracts/workspace-intelligence/workspace-dependency-graph.v1.json",workspaceKnowledgeGraph:"contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",workspaceGraphStream:"contracts/workspace-intelligence/workspace-graph-stream.v1.json",workspaceKnowledgeGraphChangeOverlay:"contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",workspaceKnowledgeSearch:"contracts/workspace-intelligence/workspace-knowledge-search.v1.json",workspaceGraphTokenEfficiency:"contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",workspaceIntelligenceBenchmark:"contracts/workspace-intelligence/workspace-intelligence-benchmark.v1.json",modelUsageEvent:"contracts/workspace-intelligence/model-usage-event.v1.json",workspaceIntelligenceEvaluation:"contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",workspaceIntelligenceEvaluationComparison:"contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json",workspaceIntelligenceHistory:"contracts/workspace-intelligence/workspace-intelligence-history.v1.json",agentCustomizationPackCapabilities:"contracts/agent-customization-pack.v1.json",agentFrameworkCapabilities:"contracts/agent-framework-capabilities.v1.json",agentFrameworkAdapterManifest:"contracts/workspace-intelligence/agent-framework-adapter-manifest.v1.json",agentFrameworkConformanceReport:"contracts/workspace-intelligence/agent-framework-conformance-report.v1.json",agentFrameworkChangePlan:"contracts/workspace-intelligence/agent-framework-change-plan.v1.json",agentFrameworkOwnershipReceipt:"contracts/workspace-intelligence/agent-framework-ownership-receipt.v1.json",agentFrameworkAdmissionCandidate:"contracts/workspace-intelligence/agent-framework-admission-candidate.v1.json",agentCustomizationPackReport:"contracts/workspace-intelligence/agent-customization-pack-report.v1.json",agentReportsIndex:"contracts/workspace-intelligence/agent-reports-index.v1.json",workspaceOperationalSkill:"contracts/workspace-intelligence/workspace-operational-skill.v1.json",workspaceSkillsIndex:"contracts/workspace-intelligence/workspace-skills-index.v1.json",workspaceExplain:"contracts/workspace-intelligence/workspace-explain.v1.json",agentActionOutcome:"contracts/workspace-intelligence/agent-action-outcome.v1.json",doctorRemediationPlan:"contracts/doctor-remediation-plan.v2.json",doctorDependencyRepairTransaction:"contracts/workspace-intelligence/doctor-dependency-repair-transaction.v1.json",artifactRemediationPlan:"contracts/artifact-remediation-plan.v1.json",studioCardRepairCapabilities:"contracts/studio-card-repair-capabilities.v1.json",workspaceRepairProposal:"contracts/workspace-intelligence/workspace-repair-proposal.v1.json",workspaceRepairCapabilities:"contracts/workspace-repair-capabilities.v1.json",workspaceRepairTransaction:"contracts/workspace-intelligence/workspace-repair-transaction.v1.json",doctorFixResult:"contracts/workspace-intelligence/doctor-fix-result.v1.json",backendImportStackParitySnapshot:"contracts/backend-import-stack-parity.snapshot.json",bootstrapCompliance:"contracts/bootstrap-compliance.v1.json",commandCapabilities:"contracts/command-capabilities.v1.json",createPlannerCapabilities:"contracts/create-planner-capabilities.v1.json",doctorRemediationPlanLegacy:"contracts/doctor-remediation-plan.v1.json",extensionCliCompatibility:"contracts/extension-cli-compatibility.v1.json",infraStack:"contracts/infra-stack.v1.json",mirrorOps:"contracts/mirror-ops.v1.json",moduleLayout:"contracts/module-layout.v1.json",moduleSupport:"contracts/module-support.v1.json",pipelineLastRun:"contracts/pipeline-last-run.v1.json",transparencyEvidence:"contracts/transparency-evidence.v1.json",version:"contracts/version.v1.json",studioBlockerHandoff:"contracts/workspace-intelligence/studio-blocker-handoff.v1.json",workspaceRegistry:"contracts/workspace-registry.v1.json",workspaceRunLast:"contracts/workspace-run-last.v1.json",workspaceShareBundle:"contracts/workspace-share-bundle.v1.json",autopilotRelease:"contracts/autopilot-release.v1.json",workspaceList:"contracts/workspace-list.v1.json",workspaceSync:"contracts/workspace-sync.v1.json",compatibilityMatrix:"contracts/compatibility-matrix.v1.json",mcpDesign:"contracts/workspace-intelligence/mcp-design.v1.json",agentHooks:"contracts/workspace-intelligence/agent-hooks.v1.json",projectArchive:"contracts/project-archive.v1.json",workspaceSnapshot:"contracts/workspace-snapshot.v1.json",workspaceSnapshotV2:"contracts/workspace-snapshot.v2.json",infraPlan:"contracts/infra-plan.v1.json",privateProductManifest:"contracts/private-product-manifest.v1.json",productFactoryPlan:"contracts/product-factory-plan.v1.json",workspaceModelCache:"contracts/workspace-model-cache.v1.json",workspaceWatchEvent:"contracts/workspace-watch-event.v1.json",doctorProjectScan:"contracts/doctor-project-scan.v2.json",doctorWorkspaceCache:"contracts/doctor-workspace-cache.v2.json"};return Object.fromEntries(Object.entries(t).map(([r,o])=>{let n=e[r];return [r,{schemaVersion:o,contractPath:n,publication:n?r==="runtimeCommandSurface"||r==="cliRuntimeCommandInventory"||r.endsWith("Capabilities")||r.endsWith("Snapshot")||r==="extensionCliCompatibility"||r==="moduleLayout"||r==="moduleSupport"?"capability-contract":"json-schema":"embedded-type",...r==="workspaceIntelligenceArtifacts"?{artifacts:Object.fromEntries(Object.keys(p).map(a=>[a,{path:p[a],schemaVersion:q[a],contractPath:r$2[a]}]))}:{}}]}))}var as="rapidkit-command-capabilities-v1",pd="rapidkit-version-v1";var sg=["catalog","pulse","nova","orbit","atlas","vertex","summit","beacon","ledger","flux","nexus","apex","harbor","forge","spark","portal","studio","canvas","quantum","vault","zenith","compass","vector","catalyst","saas","commerce","radar","stellar","prism","cedar","momentum","signal","cipher","lumen","trail","ridge"],ig={"fastapi.standard":"api","fastapi.ddd":"api","nestjs.standard":"api","springboot.standard":"service","gofiber.standard":"api","gogin.standard":"api","dotnet.webapi.clean":"api"},cg={nextjs:"web",remix:"app","vite-react":"web","vite-vue":"web","vite-svelte":"web","vite-solid":"web","vite-vanilla":"app",nuxt:"app",angular:"app",astro:"site",sveltekit:"app"},lg={tauri:"desktop",electron:"desktop","vscode-extension":"extension",laravel:"api"};function pg(t){return t[Math.floor(Math.random()*t.length)]}function ss(t){let e=pg(sg),r=l$5(t);if(r){let i=cg[r.id]??"app";return `${e}-${i}`}let o=r$4(t);if(o)return `${e}-${lg[o.id]??"app"}`;let n=a$3(t),a=n?ig[n.id]??"service":"app";return `${e}-${a}`}async function gg(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function fg(t){if(!await M.pathExists(t))return [];let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(o)for(let n of await promises.readdir(o,{withFileTypes:true})){let a=P.join(o,n.name);n.isFile()?e.push(a):n.isDirectory()&&r.push(a);}}return e}async function ud(t,e){await M.outputFile(t,`${JSON.stringify(e,null,2)}
-`,"utf-8");}function gt(t,e){return P.isAbsolute(e)?e:P.join(t,e)}function hg(t,e){if(!e.trim()||P.isAbsolute(e)||/^[a-zA-Z]:[\\/]/.test(e))throw new Error(`Mirror artifact target must be a non-empty relative path: ${e}`);let r=P.resolve(t),o=P.resolve(r,e),n=P.relative(r,o);if(!n||n.startsWith("..")||P.isAbsolute(n))throw new Error(`Mirror artifact target escapes the managed artifact directory: ${e}`);return o}async function md(t,e){let r=P.relative(t,e),o=t;for(let a of r.split(P.sep).slice(0,-1)){o=P.join(o,a);let i=await promises.lstat(o).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)break;if(i.isSymbolicLink())throw new Error(`Mirror artifact target traverses a symbolic link: ${o}`);if(!i.isDirectory())throw new Error(`Mirror artifact target parent is not a directory: ${o}`)}let n=await promises.lstat(e).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(n?.isSymbolicLink()||n&&!n.isFile())throw new Error(`Mirror artifact target must be absent or a regular file: ${e}`)}async function wg(t,e){let r=P.resolve(t),o=P.relative(r,P.resolve(e));if(!o||o.startsWith("..")||P.isAbsolute(o))throw new Error("Managed mirror directory escapes the workspace.");let n=r;for(let a of o.split(P.sep)){n=P.join(n,a);let i=await promises.lstat(n);if(i.isSymbolicLink()||!i.isDirectory())throw new Error(`Managed mirror path must contain only real directories: ${n}`)}}function yg(t,e){if(t.target)return t.target;if(t.source)return P.basename(t.source);if(t.url)try{let r=new URL(t.url).pathname,o=P.basename(r);if(o&&o!=="/")return o}catch{}return `${e}.artifact`}async function kg(t){let e=t$1(t,"trusted-sources.lock").find(o=>existsSync(o)),r=new Set(["localhost","127.0.0.1"]);if(!e)return r;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(a=>a.trim()).filter(a=>a.length>0&&!a.startsWith("#"));for(let a of n)r.add(a.toLowerCase());}catch{}return r}async function vg(t,e,r){await M.ensureDir(P.dirname(e)),await new Promise((o,n)=>{let i=(t.startsWith("https://")?kd:yd).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let l=createWriteStream(e);c.pipe(l),l.on("finish",()=>{l.close(),o();}),l.on("error",p=>{n(p);});});i.setTimeout(r,()=>{i.destroy(new Error(`Request timeout after ${r}ms`));}),i.on("error",c=>{n(c);});});}async function Pg(t,e,r,o,n){let a=new URL(t),i=JSON.stringify(e),c=a.protocol==="https:"?kd:yd;await new Promise((l,p)=>{let g=c.request({method:"POST",hostname:a.hostname,port:a.port||(a.protocol==="https:"?443:80),path:`${a.pathname}${a.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(i),...o?{Authorization:`Bearer ${o}`}:{},...n||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){p(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),l();});g.setTimeout(r,()=>{g.destroy(new Error(`Request timeout after ${r}ms`));}),g.on("error",u=>{p(u);}),g.write(i),g.end();});}function gd(t){return new Promise(e=>setTimeout(e,t))}async function jg(t,e,r,o){let n=gt(t,e||".workspai/reports/evidence-export-dead-letter.ndjson");return await M.ensureDir(P.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:o,payload:r})}
-`,"utf-8"),n}function bg(t,e){if(!e?.enabled)return {headers:{}};let r=process.env[e.hmacKeyEnv];if(!r)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let o=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",a=createHmac(o,r).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:a,"x-rapidkit-evidence-signature-alg":o}}}async function Cg(t,e,r){let o=(r.algorithm||"sha256").toLowerCase(),n=gt(t,r.publicKeyPath);if(!await M.pathExists(n))return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Public key not found: ${n}`};try{let a=await promises.readFile(n,"utf-8"),i=await promises.readFile(e),c=createVerify(o);c.update(i),c.end();let l=Buffer.from(r.signature,"base64"),p=c.verify(a,l),g=createHash("sha256").update(a).digest("hex");return {verified:p,algorithm:o,publicKeyPath:n,publicKeyFingerprint:g,signature:r.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(a){return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Attestation verification error: ${a.message}`}}}async function Sg(t,e,r,o){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};let a=r.signaturePath?gt(t,r.signaturePath):null;if(!a||!await M.pathExists(a))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:a};let i=["verify-blob",e,"--signature",a],c=r.certificatePath?gt(t,r.certificatePath):null;c&&i.push("--certificate",c);let l=r.bundlePath?gt(t,r.bundlePath):null;l&&i.push("--bundle",l);let p=r.keyPath?gt(t,r.keyPath):null;p&&i.push("--key",p),r.identity&&i.push("--certificate-identity",r.identity),r.issuer&&i.push("--certificate-oidc-issuer",r.issuer),r.rekorUrl&&i.push("--rekor-url",r.rekorUrl),o.requireTransparencyLog||i.push("--insecure-ignore-tlog");try{let g=await execa("cosign",i,{reject:false});return g.exitCode===0?{verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${g.stderr||g.stdout||"unknown error"}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}catch(g){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${g.message}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}}async function Eg(t,e){let r=e.algorithm||"sha256",o=gt(t,e.policyPath),n=gt(t,e.signaturePath),a=gt(t,e.publicKeyPath);if(!await M.pathExists(o))return {verified:false,message:`Governance policy bundle not found: ${o}`,policies:null};if(!await M.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await M.pathExists(a))return {verified:false,message:`Governance policy public key not found: ${a}`,policies:null};try{let i=await promises.readFile(o,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),l=await promises.readFile(a,"utf-8"),p=createVerify(r);return p.update(i),p.end(),p.verify(l,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(i).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(i){return {verified:false,message:`Governance policy bundle verification error: ${i.message}`,policies:null}}}async function is(t$2,e){let r=[],o={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=t$1(t$2,"mirror-config.json").find(j=>existsSync(j))??q$1(t$2,"mirror-config.json"),a=q$1(t$2,"mirror.lock"),i=q$1(t$2,"mirror","artifacts"),c=q$1(t$2,"reports"),l=await kg(t$2);if(!await M.pathExists(n))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .workspai/mirror-config.json not found."}),{checks:r,details:o};let p={};try{p=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return r.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:r,details:o}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||p.mode==="offline-only"))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:r,details:o};await M.ensureDir(i);try{await wg(t$2,i);}catch(j){return r.push({id:"mirror.root.safety",status:"failed",message:j instanceof Error?j.message:String(j)}),{checks:r,details:o}}let u=Math.max(0,p.prefetch?.retries??2),f=Math.max(0,p.prefetch?.backoffMs??250),b=Math.max(1e3,p.prefetch?.timeoutMs??15e3),k=p.security?.requireAttestation===true,S=p.security?.requireSigstore===true,A=p.security?.requireTransparencyLog===true,E=p.security?.requireSignedGovernance===true,d=p.security?.evidenceExport,m=(process.env.RAPIDKIT_ENV||p.security?.governance?.environment||"dev").toLowerCase(),w=p.security?.governance?.policies||{};if(p.security?.governanceBundle){let j=await Eg(t$2,p.security.governanceBundle);if(r.push({id:"governance.bundle.verify",status:j.verified?"passed":"failed",message:j.message}),j.verified&&j.policies)w=j.policies,o.governanceBundleVerified=true;else if(E)return {checks:r,details:o}}let y=w[m],h=A||y?.requireTransparencyLog===true,v=[],x=Array.isArray(p.artifacts)?p.artifacts:[],R=[];for(let j=0;j<x.length;j+=1){let _=x[j],N=_.id||`artifact-${j+1}`,V=_.source?gt(t$2,_.source):null,L=yg(_,N),q;try{q=hg(i,L),await md(i,q);}catch(te){r.push({id:`mirror.target.${N}`,status:"failed",message:te instanceof Error?te.message:String(te)});continue}let H=false,ce=q,le=false,ae=async()=>{le&&await promises.rm(ce,{force:true}).catch(()=>{});},Be={sourceType:"path",source:V||_.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(V&&await M.pathExists(V))await M.ensureDir(P.dirname(q)),ce=`${q}.${process.pid}.${randomUUID()}.tmp`,le=true,await promises.copyFile(V,ce),o.syncedArtifacts+=1,H=true,Be={sourceType:"path",source:V,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},r.push({id:`mirror.sync.${N}`,status:"passed",message:`Mirrored artifact ${N} from source path.`});else if(_.url){let te="";try{te=new URL(_.url).hostname.toLowerCase();}catch{r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Invalid URL for ${N}: ${_.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||l.has(te))){r.push({id:`mirror.prefetch.trust.${N}`,status:"failed",message:`Untrusted mirror host for ${N}: ${te}. Add host to .workspai/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await M.pathExists(q)?(H=true,Be={sourceType:"url",source:_.url,host:te,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},r.push({id:`mirror.prefetch.${N}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${N}.`})):r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${N} without an existing mirrored copy.`}),!H))continue;if(!H){await M.ensureDir(P.dirname(q)),ce=`${q}.${process.pid}.${randomUUID()}.tmp`,le=true;let Y=null,I=0;for(let J=1;J<=u+1;J+=1){I=J;try{await promises.rm(ce,{force:true}).catch(()=>{}),await vg(_.url,ce,b),o.syncedArtifacts+=1,H=true,Be={sourceType:"url",source:_.url,host:te,fetchedAt:new Date().toISOString(),attempts:I,trusted:true},r.push({id:`mirror.prefetch.${N}`,status:"passed",message:I>1?`Prefetched artifact ${N} from ${te} after ${I} attempts.`:`Prefetched artifact ${N} from ${te}.`});break}catch(K){if(Y=K,J<=u){await gd(f*J);continue}}}if(!H){await ae(),r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Failed to prefetch ${N} after ${u+1} attempt(s): ${Y?.message||"unknown error"}`});continue}}if(!H){r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Failed to prefetch ${N}.`});continue}}if(!H){_.required||e.offlineMode?r.push({id:`mirror.sync.${N}`,status:"failed",message:`Mirror source missing for ${N}${V?`: ${V}`:""}`}):r.push({id:`mirror.sync.${N}`,status:"skipped",message:`Mirror source not found for optional artifact ${N}.`});continue}let qe=await gg(ce);if(_.sha256&&_.sha256.toLowerCase()!==qe.toLowerCase()){r.push({id:`mirror.verify.${N}`,status:"failed",message:`Checksum mismatch for ${N}.`}),await ae();continue}o.verifiedArtifacts+=1,r.push({id:`mirror.verify.${N}`,status:"passed",message:`Checksum verified for ${N}.`});let je=_.attestation?await Cg(t$2,ce,_.attestation):null;if(_.attestation){if(r.push({id:`mirror.attest.${N}`,status:je?.verified?"passed":"failed",message:je?.message||"Attestation verification failed."}),!je?.verified){await ae();continue}}else if(k){r.push({id:`mirror.attest.${N}`,status:"failed",message:`Attestation is required but missing for ${N}.`}),await ae();continue}else r.push({id:`mirror.attest.${N}`,status:"skipped",message:`No attestation provided for ${N}.`});let D=_.attestation?.sigstore,G=D?await Sg(t$2,ce,D,{requireTransparencyLog:h}):null;if(D){if(r.push({id:`mirror.sigstore.${N}`,status:G?.verified?"passed":"failed",message:G?.message||"Sigstore verification failed."}),v.push({artifactId:N,verified:!!G?.verified,tlogVerified:!!G?.tlogVerified,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,timestamp:new Date().toISOString(),environment:m}),!G?.verified){await ae();continue}}else if(S){r.push({id:`mirror.sigstore.${N}`,status:"failed",message:`Sigstore attestation is required but missing for ${N}.`}),await ae();continue}else r.push({id:`mirror.sigstore.${N}`,status:"skipped",message:`No Sigstore attestation provided for ${N}.`});if(D&&G?.verified&&y){let te=y.allowedIdentities||[];if(te.length>0){let Y=!!G.identity&&te.includes(G.identity);if(r.push({id:`mirror.sigstore.policy.identity.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore identity policy passed for ${N} in ${m}.`:`Sigstore identity policy failed for ${N} in ${m}.`}),!Y){await ae();continue}}let z=y.allowedIssuers||[];if(z.length>0){let Y=!!G.issuer&&z.includes(G.issuer);if(r.push({id:`mirror.sigstore.policy.issuer.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore issuer policy passed for ${N} in ${m}.`:`Sigstore issuer policy failed for ${N} in ${m}.`}),!Y){await ae();continue}}let ee=y.allowedRekorUrls||[];if(ee.length>0){let Y=!!G.rekorUrl&&ee.includes(G.rekorUrl);if(r.push({id:`mirror.sigstore.policy.rekor.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore Rekor policy passed for ${N} in ${m}.`:`Sigstore Rekor policy failed for ${N} in ${m}.`}),!Y){await ae();continue}}}else y&&r.push({id:`mirror.sigstore.policy.${N}`,status:"skipped",message:`Sigstore governance policy configured for ${m} but no verified Sigstore attestation for ${N}.`});le&&(await md(i,q),await promises.rename(ce,q),le=false);let oe=await promises.stat(q);R.push({id:N,path:P.relative(t$2,q),sha256:qe,size:oe.size,provenance:Be,attestation:{detached:{provided:!!_.attestation,verified:je?.verified||false,algorithm:je?.algorithm||null,publicKeyPath:je?.publicKeyPath||null,publicKeyFingerprint:je?.publicKeyFingerprint||null,signature:je?.signature||null,verifiedAt:je?.verified?new Date().toISOString():null},sigstore:{provided:!!D,verified:G?.verified||false,tlogVerified:G?.tlogVerified||false,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,bundlePath:G?.bundlePath||null,certificatePath:G?.certificatePath||null,signaturePath:G?.signaturePath||null,verifiedAt:G?.verified?new Date().toISOString():null}}});}let C=p.retention?.keepLast;if(typeof C=="number"&&C>0){let j=new Set(R.map(N=>P.resolve(t$2,N.path))),_=(await fg(i)).filter(N=>!j.has(P.resolve(N)));if(_.length>C){let N=await Promise.all(_.map(async L=>({filePath:L,stat:await promises.stat(L)})));N.sort((L,q)=>q.stat.mtimeMs-L.stat.mtimeMs);let V=N.slice(C);for(let L of V)await promises.unlink(L.filePath),o.rotatedFiles+=1;}}r.push({id:"mirror.rotate",status:"passed",message:o.rotatedFiles>0?`Mirror retention rotation removed ${o.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let $={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:p.mode||null,environment:m,artifacts:R};if(await promises.writeFile(a,`${JSON.stringify($,null,2)}
-`,"utf-8"),o.lockWritten=true,r.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${P.relative(t$2,a)}.`}),o.transparencyEvidenceRecords=v.length,v.length>0){let j={schemaVersion:s$2.transparencyEvidence.schemaVersion,generatedAt:new Date().toISOString(),environment:m,records:v},_=new Date().toISOString().replace(/[:.]/g,"-"),N=P.join(c,`transparency-evidence-${_}.json`),V=P.join(c,"transparency-evidence.latest.json");if(b$p(`.workspai/reports/${P.basename(N)}`,j),b$p(t.transparencyEvidence,j),await M.ensureDir(c),await ud(N,j),await ud(V,j),o.transparencyEvidenceWritten=true,r.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${P.relative(t$2,V)}.`}),d?.enabled){let L=Math.max(1e3,d.timeoutMs??1e4);if(d.target==="file")if(!d.filePath)r.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let q=gt(t$2,d.filePath);await M.ensureDir(P.dirname(q)),await promises.appendFile(q,`${JSON.stringify(j)}
-`,"utf-8"),o.evidenceExported=true,o.evidenceExportTarget=q,r.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${q}.`});}catch(q){r.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${q.message}`});}else if(d.target==="http")if(!d.endpoint)r.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let q=Math.max(0,d.retries??0),H=Math.max(0,d.backoffMs??500),ce=bg(j,d.signing);ce.error&&r.push({id:"sigstore.evidence.export.http",status:"failed",message:ce.error});try{let le=d.authTokenEnv?process.env[d.authTokenEnv]:void 0,ae=false,Be=null;for(let qe=1;qe<=q+1;qe+=1)try{if(ce.error)throw new Error(ce.error);await Pg(d.endpoint,j,L,le,ce.headers),o.evidenceExported=true,o.evidenceExportTarget=d.endpoint,r.push({id:"sigstore.evidence.export.http",status:"passed",message:qe>1?`Transparency evidence exported to HTTP endpoint ${d.endpoint} after ${qe} attempts.`:`Transparency evidence exported to HTTP endpoint ${d.endpoint}.`}),ae=true;break}catch(je){Be=je,qe<=q&&await gd(H*qe);}if(!ae)throw Be||new Error("unknown evidence export error")}catch(le){let ae=`Evidence HTTP export failed: ${le.message}`;r.push({id:"sigstore.evidence.export.http",status:"failed",message:ae});try{let Be=await jg(t$2,d.deadLetterPath,j,ae);r.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${Be}.`});}catch(Be){r.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${Be.message}`});}}}if(d.failOnError&&r.some(H=>H.status==="failed"&&(H.id==="sigstore.evidence.export.file"||H.id==="sigstore.evidence.export.http")))return {checks:r,details:o}}else r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else r.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:r,details:o}}function Rn(t){let e=f$6(t.detection.runtime),r=x$1({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),o=[];o.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),o.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),o.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),o.push({id:"lifecycle-commands",status:r.lifecycleCommands.length>1?"pass":"warn",message:r.lifecycleCommands.length>1?`Lifecycle commands available: ${r.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:r.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=o.some(i=>i.status==="fail"),a=o.some(i=>i.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":a?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:r.lifecycleCommands,unsupportedLifecycleCommands:r.unsupportedLifecycleCommands,moduleCommands:r.moduleCommands},checks:o}}function Ag(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function xn(t){if(t.existingProjectJson?.module_support===true){let e=Ag(t.existingProjectJson),r=e?a$3(e):void 0;return r?.owner==="core"&&r.moduleSupport===true}return  false}var vd=[a$O,b$n];function Rg(t,e){let r=P.relative(t,e);return r===""||r.length>0&&!r.startsWith("..")&&!P.isAbsolute(r)}async function lt(t){let e=await M__default.realpath(t);for(let r of vd){let o=P.join(t,r),n=await M__default.lstat(o).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${o}`);let a=await M__default.realpath(o);if(!Rg(e,a))throw new Error(`Project metadata directory resolves outside the project: ${o}`)}}async function Pd(t){let e=P.basename(t);return vd.includes(e)?(await M__default.lstat(t)).isSymbolicLink():false}function jd(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function _g(t){let e=t.trim();if(!e)return "imported-project";let r=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),o=r[r.length-1]||e,n=o.split(":"),a=(n[n.length-1]||o).replace(/\.git$/i,"");return jd(a)||"imported-project"}function Mt(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function Ig(t){return Mt(t)?"git-url":"local-folder"}async function Og(t,e){let r=jd(e)||"imported-project",o=0;for(;;){let n=o===0?r:o===1?`${r}-imported`:`${r}-imported-${o}`,a=P.join(t,n);if(!await M__default.pathExists(a))return a;o+=1;}}function Ng(t,e){let r=P.resolve(t),o=P.resolve(e),n=P.relative(r,o);return n===""||n.length>0&&!n.startsWith("..")&&!P.isAbsolute(n)}function $g(t,e){if(Ng(t,e))throw new Error("Import source must be outside the current workspace root.")}function Tg(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function Mg(t){let e=P.basename(t);return !(await Pd(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||Tg(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function Wg(t){await lt(t);for(let e of u(t,"project.json"))if(await M__default.pathExists(e))try{return await M__default.readJson(e)}catch{return null}return null}async function Dg(t){await lt(t.projectPath);let e=new Date().toISOString(),r=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),o=b$a({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:r}),n=o.contractRelativePath,a=v$1(t.projectPath,"project.json"),i=v$1(t.projectPath,"import.json"),c=v$1(t.projectPath,"import-readiness.json"),l=xn({existingProjectJson:t.existingProjectJson}),p=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],g=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},u={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:P.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:P.basename(t.projectPath),kind:t.projectKind,category:a$f(t.projectKind),project_type:a$f(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:l,modules:p,contracts:g,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:o.relativePath,is_external:o.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},f={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:P.basename(t.projectPath)},project:{name:u.name,slug:u.slug,relative_path:n,kind:t.projectKind,category:a$f(t.projectKind),module_support:l},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,category:a$f(t.projectKind),confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:l,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},b=Rn({projectName:String(u.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:l,projectPath:t.projectPath,generatedAt:new Date(e)});return await M__default.ensureDir(P.dirname(a)),await M__default.writeJson(a,u,{spaces:2}),await M__default.writeJson(i,f,{spaces:2}),await M__default.writeJson(c,b,{spaces:2}),{projectJsonPath:a,importJsonPath:i,importReadinessPath:c,moduleSupport:l}}async function Lg(t,e){let r={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,relationship:"imported",importedAt:new Date().toISOString()};await b$c(t,[r]);}async function Fg(t){await M__default.pathExists(t)&&(await lt(t),await M__default.remove(t));}async function Gg(t,e){await Fg(e),await c$4(t,[e]);}async function bd(t){let e=P.resolve(t.workspacePath),r=t.source.trim(),o=t.sourceType??Ig(r),n=t.name??(o==="git-url"?_g(r):P.basename(r)),a=await Og(e,n),i=false;try{if(o==="local-folder"){let m=P.resolve(r),w=await M__default.stat(m).catch(()=>null);if(!w||!w.isDirectory())throw new Error("Import source is not a directory.");if(await lt(m),k$1(m))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");$g(e,m),i=true,await M__default.copy(m,a,{overwrite:false,errorOnExist:true,filter:Mg});}else i=true,await execa("git",["clone","--depth","1","--",r,a],{timeout:12e4,env:a$e()});await lt(a);let c=await Wg(a),l=m$3(a,c),p=await b$9(a,c,{runtime:l.runtime,framework:l.key}),[g,u]=await Promise.all([q$3(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):p$6(e)]),f=o$3({profile:g,runtime:l.runtime,subjectLabel:P.basename(a),mode:u}),b=n$2({profile:g,runtimes:await r$1(e,{additionalRuntimes:[l.runtime]}),mode:u}),k=f.ok?b:f;if(!k.ok&&u==="strict")throw new Error(k.message);let S=await Dg({workspacePath:e,projectPath:a,sourceType:o,detection:l,existingProjectJson:c,projectKind:p,profileCompatibility:k}),A=b$a({workspacePath:e,projectPath:a,projectName:P.basename(a)}),E={ingestionPlan:Ut({action:"import-project",resourceKind:"project",sourceKind:o,mode:o==="git-url"?"clone":"copy",ownership:o==="git-url"?"materialized":"workspace-owned",registration:"project",source:o==="git-url"?r:P.resolve(r),targetWorkspace:e,destination:a,projectGrounding:t.projectGrounding??"managed"}),name:P.basename(a),path:a,relativePath:A.contractRelativePath,stack:l.importStack,runtime:l.runtime,framework:l.key,frameworkDisplayName:l.displayName,supportTier:l.supportTier,moduleSupport:S.moduleSupport,confidence:l.confidence,source:o,projectJsonPath:S.projectJsonPath,importJsonPath:S.importJsonPath,importReadinessPath:S.importReadinessPath,profileCompatibility:k};await Lg(e,E);let{syncWorkspaceContract:d}=await import('./workspace-contract-VWPOIYHJ.js');return await d({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:E.path,projectName:E.name,relationship:"imported",mode:t.projectGrounding??"managed"}),E}catch(c){if(i)try{await Gg(e,a);let{syncWorkspaceContract:l}=await import('./workspace-contract-VWPOIYHJ.js');await l({workspacePath:e,strict:true});}catch(l){let p=c instanceof Error?c.message:String(c),g=l instanceof Error?l.message:String(l);throw new Error(`Import failed: ${p}. Rollback also failed: ${g}`)}throw c}}function Vg(t){return {schemaVersion:En,sourceMode:"linked",sourceCodeModified:false,projectMetadataFiles:[".workspai/project.json",".workspai/adopt.json",".workspai/adopt-readiness.json",f$1,...t==="off"?[]:[h$1,g$3,b$8,i$1]],repositoryControlFiles:[{path:".gitignore",action:"reconcile",condition:"machine-local workspace binding and project-grounding portability rules"},...t==="managed"?[{path:"AGENTS.md",action:"reconcile",condition:"managed grounding is enabled and the path is a regular file; authored deletions and symbolic links are preserved"},{path:".agents/skills/workspai-*/SKILL.md",action:"reconcile",condition:"managed provider-neutral Skill discovery is enabled; authored collisions and unsafe symbolic links are preserved"},...g$4.map(e=>({path:e,action:"reconcile",condition:"managed provider adapter is enabled; authored content, deletions, symbolic links, and unsafe parent paths are preserved"}))]:[]],workspaceOperations:["register-project","sync-contract","rebuild-model","rebuild-graph","sync-agent-grounding"]}}function Jg(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function Kg(t,e){return P.resolve(t)===P.resolve(e)}async function Hg(t){await lt(t);for(let e of u(t,"project.json")){if(!await M__default.pathExists(e))continue;let r;try{r=JSON.parse((await M__default.readFile(e)).toString("utf8"));}catch(o){throw new Error(`Authoritative project metadata is malformed: ${e}: ${o instanceof Error?o.message:String(o)}`)}if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return r}return null}async function Cd(t,e){let r=P.relative(t,e);if(r.startsWith("..")||P.isAbsolute(r))return  true;let o=r.split(P.sep).slice(0,-1),n=t;for(let a of o){n=P.join(n,a);let i=await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)return  false;if(i.isSymbolicLink()||!i.isDirectory())return  true}return  false}async function Ug(t){let e=P.join(t,".amazonq"),r=await M__default.lstat(e).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(!r)return [e,P.join(e,"rules")];if(r.isSymbolicLink()||!r.isDirectory())return [];let o=P.join(e,"rules");return await M__default.lstat(o).catch(a=>{if(a.code==="ENOENT")return null;throw a})?[]:[o]}async function Sd(t,e){let r=[P.join(e,"AGENTS.md"),...g$4.map(n=>P.join(e,n))],o=[];for(let n of r){if(!(await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c}))?.isSymbolicLink())continue;let i=await a$d(e,n);i&&o.push(i);}return [v$1(e,"project.json"),v$1(e,"adopt.json"),v$1(e,"adopt-readiness.json"),P.join(e,f$1),P.join(e,g$3),P.join(e,h$1),P.join(e,b$8),...r,...o,P.join(e,".gitignore"),q$1(t,"imported-projects.json")].filter((n,a,i)=>i.indexOf(n)===a)}async function cs(t,e){let r=P.resolve(t),o=P.resolve(e);await lt(o);let n=await Sd(r,o);return {workspacePath:r,projectPath:o,files:await Promise.all(n.map(async a=>{if(a.startsWith(`${o}${P.sep}`)&&await Cd(o,a))return {path:a,contents:null,preserve:"unsafe-parent"};let i=await M__default.lstat(a).catch(c=>{if(c.code==="ENOENT")return null;throw c});return i?.isSymbolicLink()?{path:a,contents:null,preserve:"symbolic-link"}:{path:a,contents:i?.isFile()?await M__default.readFile(a):null}})),createdAdapterDirectories:await Ug(o)}}async function Ed(t,e,r){let o=(await Sd(e,r)).map(a=>P.resolve(a)),n=new Set([".amazonq",".amazonq/rules"].map(a=>P.resolve(r,a)));if(t.workspacePath!==P.resolve(e)||t.projectPath!==P.resolve(r)||t.files.length!==o.length||t.files.some((a,i)=>P.resolve(a.path)!==o[i])||t.createdAdapterDirectories.some(a=>!n.has(P.resolve(a)))||new Set(t.createdAdapterDirectories.map(a=>P.resolve(a))).size!==t.createdAdapterDirectories.length)throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function Bg(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],r=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,category:a$f(t.projectKind),project_type:a$f(t.projectKind),runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,framework:t.detection.key,kit:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:r,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,...t.isExternal?{}:{discovered_relative_path:t.discoveredRelativePath},is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function qg(t,e,r){await lt(e),await Ed(r,t,e);let o=[];for(let n of r.files)try{if(n.preserve==="symbolic-link")continue;n.contents===null?await M__default.remove(n.path):(await M__default.ensureDir(P.dirname(n.path)),await M__default.writeFile(n.path,n.contents));}catch(a){o.push(a);}for(let n of [...r.createdAdapterDirectories].reverse())try{if(await Cd(e,n))continue;await M__default.rmdir(n);}catch(a){let i=a.code;i!=="ENOENT"&&i!=="ENOTEMPTY"&&o.push(a);}if(o.length>0)throw new AggregateError(o,"Failed to restore adopt rollback snapshot.")}async function ls(t$1){let e=P.resolve(t$1.workspacePath),r=P.resolve(t$1.source),o=await M__default.stat(r).catch(()=>null);if(!o||!o.isDirectory())throw new Error("Adopt source is not a directory.");if(await lt(r),Kg(e,r))throw new Error("Adopt source cannot be the workspace root itself.");if(k$1(r))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");let n=t$1.rollbackSnapshot??await cs(e,r);await Ed(n,e,r);let a=await Hg(r),i=j$5(a),c=m$3(r,i?null:a),l=l$1(r),p=[c.runtime,...l.filter($=>$!==c.runtime)].filter(($,j,_)=>$!=="unknown"&&_.indexOf($)===j);p.length===0&&p.push("unknown");let g=await b$9(r,i?{}:a,{runtime:c.runtime,framework:c.key}),u=Jg(t$1.name||(typeof a?.name=="string"?a.name:"")||P.basename(r))||"adopted-project",f=b$a({workspacePath:e,projectPath:r,projectName:u}),b=(t$1.now??new Date).toISOString(),k=v$1(r,"project.json"),S=v$1(r,"adopt.json"),A=v$1(r,"adopt-readiness.json"),E=xn({existingProjectJson:a}),[d,m]=await Promise.all([q$3(e),t$1.profilePolicyMode?Promise.resolve(t$1.profilePolicyMode):p$6(e)]),w=o$3({profile:d,runtime:c.runtime,subjectLabel:u,mode:m}),y=n$2({profile:d,runtimes:await r$1(e,{additionalRuntimes:p,excludeProjectPath:r}),mode:m}),h=w.ok?y:w;if(!h.ok&&m==="strict")throw new Error(h.message);let v=Bg({projectName:u,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,discoveredRelativePath:f.relativePath,detection:c,runtimeCandidates:p,existingProjectJson:a,refreshManagedDetection:i,projectKind:g,moduleSupport:E,adoptedAt:b}),x=await b$b(e),R={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:b,managed_by:"workspai",mode:"linked",workspace:{name:x,contract:t.workspaceContract},project:{name:u,relative_path:f.contractRelativePath,...f.isExternal?{}:{discovered_relative_path:f.relativePath},is_external:f.isExternal,kind:g,category:a$f(g),module_support:E},detection:{framework:c.key,framework_display_name:c.displayName,runtime:c.runtime,runtime_candidates:p,kind:g,category:a$f(g),confidence:c.confidence,support_tier:c.supportTier,import_stack:c.importStack,source:c.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:E,workspace_contract:"linked-project",profile_compatibility:{ok:h.ok,profile:h.profile,runtimes:h.runtimes,message:h.message,recommended_profile:h.recommendedProfile,recommended_command:h.recommendedCommand}}},C=Rn({projectName:u,relativePath:f.contractRelativePath,projectKind:g,source:"adopted-local",detection:c,moduleSupport:E,projectPath:r,generatedAt:new Date(b)});if(t$1.dryRun!==true)try{await lt(r),await M__default.ensureDir(P.dirname(k)),await M__default.writeJson(k,v,{spaces:2}),await M__default.writeJson(S,R,{spaces:2}),await M__default.writeJson(A,C,{spaces:2});let $={name:u,path:r,relativePath:f.contractRelativePath,relationship:"adopted",stack:c.importStack,runtime:c.runtime,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:E,confidence:c.confidence,source:"adopted-local",importedAt:b};await b$c(e,[$]);let{syncWorkspaceContract:j}=await import('./workspace-contract-VWPOIYHJ.js');await j({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:r,projectName:u,relationship:"adopted",mode:t$1.projectGrounding??"managed",now:new Date(b)});}catch($){try{await qg(e,r,n);let{syncWorkspaceContract:j}=await import('./workspace-contract-VWPOIYHJ.js');await j({workspacePath:e,strict:true});}catch(j){throw new AggregateError([$,j],`Adopt failed and rollback was incomplete: ${$ instanceof Error?$.message:String($)}`)}throw $}return {ingestionPlan:Ut({action:"adopt-project",resourceKind:"project",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"project",source:r,targetWorkspace:e,destination:r,projectGrounding:t$1.projectGrounding??"managed"}),name:u,path:r,relativePath:f.relativePath,contractRelativePath:f.contractRelativePath,isExternal:f.isExternal,relationship:"adopted",stack:c.importStack,runtime:c.runtime,runtimeCandidates:p,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:E,confidence:c.confidence,projectJsonPath:k,adoptJsonPath:S,adoptReadinessPath:A,profileCompatibility:h,effects:Vg(t$1.projectGrounding??"managed"),wroteFiles:t$1.dryRun!==true}}async function zg(t){let e=await M__default.lstat(t).catch(()=>null);if(!e||!e.isDirectory()||e.isSymbolicLink())throw new Error(`Workspace path must be a real directory, not a symbolic link: ${t}`);for(let r of [".workspai",".rapidkit"]){let o=P.join(t,r),n=await M__default.lstat(o).catch(()=>null);if(n?.isSymbolicLink())throw new Error(`Workspace metadata directory must not be a symlink: ${o}`);if(n&&!n.isDirectory())throw new Error(`Workspace metadata path must be a directory: ${o}`)}}async function Yg(t){let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(!o)continue;let n=await M__default.readdir(o,{withFileTypes:true}).catch(()=>[]);for(let a of n){if(a.isSymbolicLink())continue;let i=P.join(o,a.name);if(a.isDirectory()){if([".git","node_modules",".venv","dist","build","target"].includes(a.name)||a$g(a.name))continue;r.push(i);continue}a.isFile()&&a.name===e$7&&(await M__default.remove(i),e.push(P.relative(t,i).replace(/\\/g,"/")));}}return e.sort()}async function Rd(t,e){if(await b$d(t,await b$b(t)),!(await g$5(t,true)).workspaceFound)throw new Error(`Workspace registry reconciliation failed: ${t}`);let o=await a$l(t,{silent:true,projectGrounding:e});return {writtenFiles:o.writtenFiles,warnings:o.warnings}}async function ps(t){let e=P.resolve(t.workspacePath);await zg(e);let r=Ut({action:"connect-workspace",resourceKind:"workspace",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"workspace",source:e,destination:e,projectGrounding:t.projectGrounding??"managed"});if(!k$1(e))throw new Error(`Workspace path is not a valid Workspai workspace: ${e}`);if(t.dryRun)return On(r,{status:"preview",workspacePath:e,registered:false,verified:true});let o=await c$5(e);try{let n=await Rd(e,t.projectGrounding??"managed");return On(r,{workspacePath:e,writtenFiles:n.writtenFiles,warnings:n.warnings,registered:true,verified:true})}catch(n){throw await d$6(e,o).catch(()=>{}),n}}async function ds(t){if(t.dryRun){let o=await p$4({archivePathOrUrl:t.archivePathOrUrl,outputPath:t.outputPath,dryRun:true,strict:t.strict,safety:t.safety}),n=P.resolve(o.outputPath),a=Ad(t,n);return On(a,{status:"preview",workspacePath:n,registered:false,verified:true,warnings:(o.manifest?.externalProjects??[]).map(i=>`External project "${i.name}" must be relinked after import.`)})}let e=t.outputPath?P.resolve(t.outputPath):void 0;if(e&&await M__default.pathExists(e))throw new Error(`Workspace import destination already exists: ${e}. Choose a new --output path.`);let r;try{let o=await p$4({archivePathOrUrl:t.archivePathOrUrl,outputPath:e,strict:t.strict,safety:t.safety});r=P.resolve(o.outputPath);let n=Ad(t,r);if(!k$1(r))throw new Error("Imported archive did not materialize a valid Workspai workspace.");let a=await Yg(r);o.manifest?.portableContract&&await M__default.outputJson(P.join(r,".workspai","workspace.contract.json"),o.manifest.portableContract,{spaces:2});let i=await Rd(r,t.projectGrounding??"managed");return On(n,{workspacePath:r,writtenFiles:[...o.files.map(c=>c.path),...i.writtenFiles].filter((c,l,p)=>p.indexOf(c)===l),warnings:[...i.warnings,...(o.manifest?.externalProjects??[]).map(c=>`External project "${c.name}" must be relinked after import.`),...a.length>0?[`Rebuilt ${a.length} machine-local project workspace link(s).`]:[]],registered:true,verified:true})}catch(o){throw r&&(await e$5(r).catch(()=>{}),await M__default.remove(r).catch(()=>{})),o}}function Ad(t,e){return Ut({action:"import-workspace",resourceKind:"workspace",sourceKind:"archive",mode:"hydrate",ownership:"workspace-owned",registration:"workspace",source:t.archivePathOrUrl,destination:e,projectGrounding:t.projectGrounding??"managed"})}function On(t,e){let r={schemaVersion:Sn,status:"passed",plan:t,writtenFiles:[],warnings:[],...e};return a$4(r,ld,"Workspace ingestion result"),r}function xd(t){let e={name:"Add existing software (local project, Git repository, or workspace)",value:"existing"};return t?[{name:"Create a project",value:"project"},e,{name:"Create another workspace (outside the current workspace)\u2026",value:"workspace"}]:[{name:"Create a workspace",value:"workspace"},{name:"Create a project",value:"project"},e]}function _d(){return {type:"input",name:"source",message:"Local path, Git URL, or Workspai archive:",validate:t=>t.trim().length>0||"A source is required"}}function Id(t){let e=t.trim(),r=e.startsWith("~/")?P.join(homedir(),e.slice(2)):e;if(/\.(?:workspai|rapidkit)-archive\.zip(?:[?#].*)?$/i.test(r)||!Mt(r)&&/\.zip$/i.test(r))return {kind:"workspace-archive",source:Mt(r)?r:P.resolve(r)};if(Mt(r))return {kind:"git-project",source:r};let n=P.resolve(r);return k$1(n)?{kind:"local-workspace",source:n}:{kind:"local-project",source:n}}var ef=Cn,tf=jn;function ms(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function rf(t=process.argv){let e=P.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function Cr(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function of(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function _e(t,e){let r=t.indexOf(e);if(r>=0&&r+1<t.length)return t[r+1];let o=t.find(n=>n.startsWith(`${e}=`));if(o)return o.slice(e.length+1)}function nf(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let r=Number(e);if(!Number.isSafeInteger(r)||r<1||r>16)throw new Error("--max-workers must be an integer between 1 and 16.");return r}function Ps(t){try{return nf(t.raw)}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"cli.option.max-workers.invalid",message:r,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(s.red(`\u274C ${r}`)),process.exit(1);}}async function Ts(t,e){let r=_e(t,"--port")?.trim(),o=t[3];if(!r||!o||!/^\d+$/.test(r))return;let n=Number.parseInt(r,10);if(n<1||n>65535)return;let a=_e(t,"--output")||".",i=P.resolve(e,a,o),c=u(i,"project.json").find(p=>O.existsSync(p))??v$1(i,"project.json");if(!await M__default.pathExists(c))return;let l=await M__default.readJson(c);await M__default.writeJson(c,{...l,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function Nd(t){let e=Ie(process.cwd()),r=t.trim().toLowerCase();if(!e||!r)return  true;try{let[o,n]=await Promise.all([q$3(e),p$6(e)]),a=a$3(r),i=l$5(r),c=r$4(r),l=i?"node":c?.runtime??a?.runtime??"python",p=o$3({profile:o,runtime:l,subjectLabel:r,mode:n}),g=n$2({profile:o,runtimes:await r$1(e,{additionalRuntimes:[l]}),mode:n}),u=p.ok?g:p;if(u.ok)return  true;let f=s$1(u);if(n==="strict")return console.log(s.red(`\u274C Profile violation (strict mode): ${u.message}`)),f&&console.log(s.gray(`\u{1F4A1} ${f}`)),false;console.log(s.yellow(`\u26A0\uFE0F  Profile warning: ${u.message}`)),f&&console.log(s.gray(`\u{1F4A1} ${f}`));}catch{}return  true}function Ms(){return j$8()}function js(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(P.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(P.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=i$4()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function af(t){return m$7(P.join(t,".venv"))}async function sf(t,e){return await Ae(t,["--version"],e)===0}async function cf(t,e){return new Promise(r=>{let o=spawn(t,["--version"],{cwd:e,stdio:"ignore",env:js()});o.once("error",()=>r(false)),o.once("close",n=>r(n===0));})}async function zt(t){let e=P.join(t,"go.mod");if(await M__default.pathExists(e))return "go";let r=P.join(t,"pom.xml"),o=P.join(t,"build.gradle"),n=P.join(t,"build.gradle.kts");if(await M__default.pathExists(r)||await M__default.pathExists(o)||await M__default.pathExists(n))return "java";if((await M__default.pathExists(t)?await O.promises.readdir(t,{withFileTypes:true}):[]).some(b=>b.isFile()&&b.name.toLowerCase().endsWith(".sln")))return "dotnet";let i=P.join(t,"src");if(await M__default.pathExists(i)&&(await O.promises.readdir(i,{withFileTypes:true})).some(k=>k.isFile()&&k.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=P.join(t,"Cargo.toml");if(await M__default.pathExists(c))return "rust";let l=P.join(t,"composer.json");if(await M__default.pathExists(l))return "php";let p=P.join(t,"package.json");if(await M__default.pathExists(p))return "node";let g=P.join(t,"pyproject.toml"),u=P.join(t,"requirements.txt"),f=P.join(t,"poetry.lock");return await M__default.pathExists(g)||await M__default.pathExists(u)||await M__default.pathExists(f)?"python":null}async function lf(t,e={}){let r=e.runCommand??Ae,o=P.join(t,".venv"),n=await M__default.pathExists(o);for(let a of e.pythonCandidates??Ms()){if(await r(a,a==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;n||await M__default.remove(o);}return 1}async function pf(t,e={}){let r=e.runCommand??Ae,o=P.join(t,".venv"),n=m$7(o);if(await M__default.pathExists(n)){if(await r(n,["-m","pip","--version"],t)===0)return 0;await M__default.remove(o);}let a=await lf(t,e);if(a!==0)return a;n=m$7(o);let i=await r(n,["-m","pip","--version"],t);return i!==0&&await M__default.remove(o),i}async function zd(t,e={}){let r=e.runCommand??Ae;for(let o of e.pythonCandidates??Ms())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function df(t,e={}){let r=e.runCommand??Ae,o=m$7(P.join(t,".venv"));if(!await M__default.pathExists(o)){let p=await zd(t,e);if(p!==0)return p}let n=process.platform==="win32"?P.join(t,".venv","Scripts","poetry.exe"):P.join(t,".venv","bin","poetry"),a=e.runCommand?await r("poetry",["--version"],t)===0:await cf("poetry",t),i=await M__default.pathExists(n)?n:a?"poetry":null;if(!i)return 0;let c=await r(i,["config","virtualenvs.in-project","true","--local"],t);if(c!==0)return c;let l=await r(i,["env","use",o],t);return l!==0?l:0}async function uf(t,e={}){let r=e.runCommand??Ae,o=m$7(P.join(t,".venv"));if(!await M__default.pathExists(o)){let i=await zd(t,e);if(i!==0)return i}await r(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=P.join(t,"requirements.txt");if(await M__default.pathExists(n)&&await r(o,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let a=P.join(t,"pyproject.toml");return await M__default.pathExists(a)&&(await r(o,["-m","pip","install","-e","."],t)===0||await r(o,["-m","pip","install","."],t)===0)?0:1}async function gs(t,e){return await df(t)!==0&&console.log(s.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await M__default.pathExists(P.join(t,".venv"))?0:(console.log(s.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await uf(t))}async function fs(t){let e=await qt("init",t);if(e===0)return 0;let r=["npm","pnpm","yarn"];for(let o of r){if(!await sf(o,t))continue;if(await Ae(o,["install"],t)===0)return console.log(s.green(`\u2705 Node init fallback succeeded with ${o} install`)),0}return e}function mf(t,e){let r=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),o=_e([...e],"--port");if(o&&!/^\d+$/.test(o.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=_e([...e],"--java-version"),a=_e([...e],"--spring-boot-version"),i=_e([...e],"--springdoc-version"),c=_e([...e],"--group-id"),l=_e([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(a&&!r(a.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(i&&!r(i.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(l&&!/^[A-Za-z0-9_.-]+$/.test(l.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=_e([...e],"--target-framework"),a=_e([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(a&&!/^[A-Za-z0-9_.]+$/.test(a.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function hs(t,e={}){if(t.includes("--dry-run")||t.includes("--no-workspace")||Rs(process.cwd()))return;let r=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:n}=await import('./create-7UENFCJK.js');await n(process.cwd(),{skipGit:r,yes:t.includes("--yes")||t.includes("-y"),userConfig:await c()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:o}=await b([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},...e.requireWorkspace?[]:[{name:"Create it without workspace management",value:"none"}]],default:1}]);if(o==="current"){let{registerWorkspaceAtPath:n}=await import('./create-7UENFCJK.js');await n(process.cwd(),{skipGit:r,yes:false,userConfig:await c()});}else o==="none"&&t.push("--no-workspace");}async function gf(t){await M__default.ensureDir(t);let e=P.join(t,"lifecycle.lock"),r=Date.now();for(;;)try{let o=await O.promises.open(e,"wx");return await o.writeFile(`${JSON.stringify({pid:process.pid})}
-`),async()=>{await o.close().catch(()=>{}),await M__default.remove(e).catch(()=>{});}}catch(o){if(o.code!=="EEXIST")throw o;let n=await M__default.readJson(e).catch(()=>null),a=Number(n?.pid),i=false;if(Number.isInteger(a)&&a>0)try{process.kill(a,0),i=true;}catch(c){i=c.code==="EPERM";}if(!i){await M__default.remove(e).catch(()=>{});continue}if(Date.now()-r>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function Mn(t,e={}){let r$1=P.join(q$2(),"transactions"),o=await gf(r$1),n;try{await b$7(r$1),n=await a$a({journalDirectory:r$1});}catch(i){throw await o(),i}let a=new Set([P.join(q$2(),"workspaces.json"),P.join(r(),"workspaces.json"),a$b(t,g$2),e$6(t,g$2),a$b(t,a$c),e$6(t,a$c),...t$1(t,"imported-projects.json")]);if(e.projectPath){a.add(v$1(e.projectPath,"project.json")),a.add(v$1(e.projectPath,"context.json")),a.add(v$1(e.projectPath,"file-hashes.json")),a.add(v$1(e.projectPath,"adopt.json")),a.add(v$1(e.projectPath,"adopt-readiness.json")),a.add(P.join(e.projectPath,f$1)),a.add(P.join(e.projectPath,g$3)),a.add(P.join(e.projectPath,h$1)),a.add(P.join(e.projectPath,b$8)),a.add(P.join(e.projectPath,i$1));for(let i of g$4)a.add(P.join(e.projectPath,i));for(let i of await j$4({workspacePath:t,projectPath:e.projectPath}))a.add(i);a.add(P.join(e.projectPath,"AGENTS.md")),a.add(P.join(e.projectPath,".gitignore"));}try{let i=new Set,c=e.projectPath;for(let p of a){let u=c&&(p===P.join(c,"AGENTS.md")||g$4.some(b=>p===P.join(c,b)))?await M__default.lstat(p).catch(b=>{if(b.code==="ENOENT")return null;throw b}):null,f=p;if(u?.isSymbolicLink()&&c){let b=await a$d(c,p);if(!b)continue;f=b;}i.has(f)||(await n.captureFile(f),i.add(f));}e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let l=false;return {registerCompensation:p=>n.registerCompensation(p),commit:async()=>{l||(await n.commit(),l=true,await o());},rollback:async()=>{if(!l){l=true;try{await n.rollback();}finally{await o();}}}}}catch(i){throw await n.rollback().catch(()=>{}),await o(),i}}async function Sr(t,e){try{await t.rollback();}catch(r){throw new AggregateError([e,r],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function Er(t,e$1,r,o={}){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await M__default.pathExists(e$1)){e.warn(`Created project path was not found for workspace linking: ${e$1}`);return}let n=Ie(e$1)||Ie(process.cwd()),a=false,i;if(n)i=await Mn(n,{projectPath:e$1});else {n=p$2(),i=await Mn(n,{projectPath:e$1,ownedWorkspace:n});try{n=(await Ws()).workspacePath;}catch(l){await Sr(i,l);}a=true;}let c="managed";try{await p$5(e$1);let l=P.relative(n,e$1);(l.startsWith("..")||P.isAbsolute(l))&&(c=(await ls({source:e$1,workspacePath:n,name:r})).relationship);let{registerProjectInWorkspaceStrict:g,registerWorkspaceStrict:u}=await import('./workspace-PAXTJCMH.js'),{syncWorkspaceContract:f}=await import('./workspace-contract-VWPOIYHJ.js'),{resolveWorkspaceRegistrationName:b}=await import('./workspace-marker-7U3NYRPJ.js');await u(n,await b(n)),await g(n,r,e$1),await f({workspacePath:n,strict:true});let{syncProjectIntelligenceLens:k}=await import('./project-intelligence-lens-YWICXW6P.js');await k({workspacePath:n,projectPath:e$1,projectName:r,relationship:c==="adopted"?"adopted":"managed",mode:"managed"}),await po(n,{strict:true}),await o.beforeCommit?.({workspacePath:n,registerCompensation:i.registerCompensation}),await i.commit();}catch(l){await Sr(i,l);}return a&&(console.log(s.gray(`\u2139\uFE0F  Project created outside a Workspai workspace \u2014 linked to managed workspace "${j$3}" (${c}).`)),console.log(s.gray(`   Registry: ${P.join(q$2(),"workspaces.json")}`)),console.log(s.gray(`   Workspace: ${n}`))),n}async function $d(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=H(t[2]);if(!e)return 1;let r=t[3];if(!r)return process.stderr.write(`Usage: workspai create project ${e.id} <name> [--agent-name <name>] [--output <dir>] [--dry-run]
+${r.stderr||""}`);return o?this.isMavenVersionAtLeast(o,[3,9,0])?{exitCode:0}:{exitCode:1,message:`Maven ${o.join(".")} detected; Maven 3.9+ is required.`}:{exitCode:1,message:"Unable to parse Maven version. Ensure Maven 3.9+ is installed and retry."}}catch{return {exitCode:1,message:"Maven version check failed. Install Maven 3.9+ and ensure mvn is on PATH."}}}shouldUseGradleNoDaemon(){return process.env.CI==="true"||process.env.RAPIDKIT_GRADLE_NO_DAEMON==="1"}inspectJavaProject(e){let r=$.existsSync(b.join(e,"pom.xml")),o=$.existsSync(b.join(e,"mvnw"))||$.existsSync(b.join(e,"mvnw.cmd")),n=$.existsSync(b.join(e,"build.gradle"))||$.existsSync(b.join(e,"build.gradle.kts"))||$.existsSync(b.join(e,"settings.gradle"))||$.existsSync(b.join(e,"settings.gradle.kts")),a=$.existsSync(b.join(e,"gradlew"))||$.existsSync(b.join(e,"gradlew.bat"));return {hasMavenProject:r||o,hasMavenWrapper:o,hasGradleProject:n||a,hasGradleWrapper:a}}findWorkspaceRoot(e){let r=e;for(;;){if($.existsSync(b.join(r,".workspai-workspace"))||$.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>$.existsSync(a));if(!n)return "isolated";try{let c=$.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}buildToolCommand(e){return this.isGradleProject(e)?this.gradleCommand(e):this.mavenCommand(e)}mavenCommand(e){let r=b.join(e,"mvnw.cmd");if(process.platform==="win32"&&$.existsSync(r))return {command:r,baseArgs:[]};let o=b.join(e,"mvnw");return $.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"mvn",baseArgs:[]}}gradleCommand(e){let r=b.join(e,"gradlew.bat");if(process.platform==="win32"&&$.existsSync(r))return {command:r,baseArgs:[]};let o=b.join(e,"gradlew");return $.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"gradle",baseArgs:[]}}isGradleProject(e){return this.inspectJavaProject(e).hasGradleProject}isMavenProject(e){return this.inspectJavaProject(e).hasMavenProject}discoverWorkspaceJavaProjects(e){let r=[],o=new Set,n=[e];for(;n.length>0;){let a=n.shift();if(!a||o.has(a))continue;o.add(a);let i=[];try{i=$.readdirSync(a,{withFileTypes:true});}catch{continue}for(let c of i){if(!c.isDirectory()||c.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(c.name))continue;let l=b.join(a,c.name),p=this.inspectJavaProject(l);(p.hasMavenProject||p.hasGradleProject)&&r.push(l),n.push(l);}}return r}withJavaCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","m2"):b.join(e,".workspai","cache","java","m2"),i=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","gradle"):b.join(e,".workspai","cache","java","gradle"),c=process.env.MAVEN_OPTS,l=process.env.GRADLE_USER_HOME,p=`-Dmaven.repo.local=${a}`;return process.env.MAVEN_OPTS=c?`${c} ${p}`:p,process.env.GRADLE_USER_HOME=i,r().finally(()=>{typeof c>"u"?delete process.env.MAVEN_OPTS:process.env.MAVEN_OPTS=c,typeof l>"u"?delete process.env.GRADLE_USER_HOME:process.env.GRADLE_USER_HOME=l;})}async runBuildTool(e,r,o=true){return this.withJavaCacheEnv(e,async()=>{try{let{command:n,baseArgs:a}=this.buildToolCommand(e),i=await this.runCommand(n,[...a,...r],e);if(i===0||!o)return {exitCode:i};let c=$.existsSync(b.join(e,"pom.xml")),l=$.existsSync(b.join(e,"build.gradle"))||$.existsSync(b.join(e,"build.gradle.kts"));return {exitCode:i,message:c||l?"Java build failed. Verify pom.xml/build.gradle syntax and dependencies, then retry.":"Java build tool is not installed or not available on PATH. Install Maven/Gradle and JDK 21+, or commit mvnw/gradlew wrapper scripts."}}catch(n){return {exitCode:1,message:`Java command execution failed: ${n instanceof Error?n.message:String(n)}. Verify pom.xml/build.gradle integrity and wrapper permissions.`}}})}resolveJarPath(e){let r=[b.join(e,"target"),b.join(e,"build","libs")];for(let o of r){if(!$.existsSync(o))continue;let a=$.readdirSync(o).filter(i=>i.toLowerCase().endsWith(".jar")).find(i=>!i.toLowerCase().endsWith("-sources.jar")&&!i.toLowerCase().endsWith("-javadoc.jar")&&!i.toLowerCase().endsWith("-plain.jar"));if(a)return b.join(o,a)}return null}commandArgsFor(e,r){if(e==="gradle"){let o=this.shouldUseGradleNoDaemon()?["--no-daemon"]:[];return r==="init"?[...o,"dependencies"]:r==="dev"?[...o,"bootRun"]:r==="test"?[...o,"test"]:[...o,"bootJar"]}return r==="init"?["-B","-q","-DskipTests","dependency:go-offline"]:r==="dev"?["spring-boot:run"]:r==="test"?["test"]:["-DskipTests","package"]}detectBuildTool(e){return this.isGradleProject(e)?"gradle":"maven"}async checkPrereqs(){let e=process.cwd(),r=this.resolveJavaCommand(e),o=await this.runCommand(r,["-version"],e);if(o!==0)return {exitCode:o,message:"JDK 21+ is required. Ensure java is on PATH or JAVA_HOME/bin/java is available."};if(this.isMavenProject(e)){let c=this.readRequiredJavaMajor(e),l=await this.detectInstalledJavaMajor(r,e);if(l!==null&&l<c)return {exitCode:1,message:`Detected Java ${l}, but project requires Java ${c}+.`};let p=b.join(process.env.JAVA_HOME||"","release");if(process.env.JAVA_HOME&&$.existsSync(p))try{let u=$.readFileSync(p,"utf-8").match(/^JAVA_VERSION="([^"]+)"/m),g=this.parseMajorJavaVersion(u?.[1]);if(g!==null&&g<c)return {exitCode:1,message:`Detected JAVA_HOME version ${g}, but project requires Java ${c}+.`}}catch{}}if(this.isMavenProject(e)||this.isGradleProject(e)){let c=this.detectBuildTool(e),l=c==="gradle"?["--version"]:["-version"],p=await this.runBuildTool(e,l);return p.exitCode!==0?p:c==="maven"&&!this.inspectJavaProject(e).hasMavenWrapper?this.checkSystemMavenVersion(e):p}let n=this.findWorkspaceRoot(e);if(n&&n===e){let c=this.discoverWorkspaceJavaProjects(n);if(c.length>0){let l=c.reduce((u,g)=>Math.max(u,this.readRequiredJavaMajor(g)),0);if(l>0){let u=await this.detectInstalledJavaMajor(r,e);if(u!==null&&u<l){let g=c.filter(j=>this.readRequiredJavaMajor(j)>u).map(j=>b.relative(e,j)).join(", ");return {exitCode:1,message:`Detected Java ${u}, but workspace project(s) [${g}] require Java ${l}+.`}}}let p=false,f=false;for(let u of c){let g=this.inspectJavaProject(u);g.hasMavenProject&&!g.hasMavenWrapper&&(p=true),g.hasGradleProject&&!g.hasGradleWrapper&&(f=true);}if(p){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(u!==0)return {exitCode:u,message:"Maven is required for one or more workspace Java projects without Maven Wrapper. Install Maven 3.9+, or add mvnw/mvnw.cmd to those projects."};let g=await this.checkSystemMavenVersion(e);if(g.exitCode!==0)return g}if(f){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));if(u!==0)return {exitCode:u,message:"Gradle is required for one or more workspace Java projects without Gradle Wrapper. Install Gradle 8+, or add gradlew/gradlew.bat to those projects."}}return {exitCode:0}}}let a=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(a===0){let c=await this.checkSystemMavenVersion(e);return c.exitCode!==0?c:{exitCode:0}}let i=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));return i===0?{exitCode:0}:{exitCode:a||i||1,message:"Neither Maven nor Gradle is available on PATH. Install one of them, or use mvnw/gradlew wrappers in project roots."}}async warmSetupCache(e){return this.withJavaCacheEnv(e,async()=>{try{let r=process.env.MAVEN_OPTS?.match(/-Dmaven\.repo\.local=([^\s]+)/)?.[1];return r&&$.mkdirSync(r,{recursive:true}),process.env.GRADLE_USER_HOME&&$.mkdirSync(process.env.GRADLE_USER_HOME,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Java cache directories"}}})}async initProject(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"init"))}async runDev(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"dev"))}async runTest(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"test"))}async runBuild(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"build"))}async runStart(e){let r=this.resolveJarPath(e);if(r)return {exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",r],e)};let o=await this.runBuild(e);if(o.exitCode!==0)return o;let n=this.resolveJarPath(e);return n?{exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",n],e)}:{exitCode:1,message:"Spring Boot build completed, but no runnable JAR was found under target/ or build/libs/. Verify build output naming and packaging plugins."}}async runLint(e){if(w$3(e,"lint"))return {exitCode:await this.runCommand("make",["lint"],e)};let r=b.join(e,"pom.xml");if($.existsSync(r)){let o=$.readFileSync(r,"utf-8");if(o.includes("spotless-maven-plugin"))return this.runBuildTool(e,["spotless:check"]);if(o.includes("checkstyle"))return this.runBuildTool(e,["checkstyle:check"])}return {exitCode:1,message:"No Java lint tooling detected. Add a Makefile lint target or configure checkstyle in Maven/Gradle."}}async runFormat(e){if(w$3(e,"format"))return {exitCode:await this.runCommand("make",["format"],e)};let r=b.join(e,"pom.xml");return $.existsSync(r)&&$.readFileSync(r,"utf-8").includes("spotless-maven-plugin")?this.runBuildTool(e,["spotless:apply"]):["build.gradle","build.gradle.kts"].map(n=>b.join(e,n)).filter(n=>$.existsSync(n)).some(n=>$.readFileSync(n,"utf-8").includes("spotless"))?this.runBuildTool(e,["spotlessApply"]):{exitCode:1,message:"No Java format tooling detected. Add a Makefile format target or configure Spotless in Maven/Gradle."}}async doctorHints(e){return ["Install JDK 21+ and Maven/Gradle (or commit mvnw/gradlew wrappers) for reliable local builds.","Run npx workspai init after dependency changes to warm Java caches for your build tool.","Use SPRING_PROFILES_ACTIVE to switch environments without changing source config."]}};var yn=class{constructor(e){this.runCommand=e;}runCommand;runtime="node";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}findWorkspaceRoot(e){let r=e;for(;;){if($.existsSync(b.join(r,".workspai-workspace"))||$.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>$.existsSync(a));if(!n)return "isolated";try{let c=$.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,r,o){let n=this.resolveDependencyMode(e),a=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=n==="isolated"?b.join(e,".workspai","cache","node"):b.join(a||e,".workspai","cache","node"),c=process.env.npm_config_cache,l=process.env.npm_config_store_dir,p=process.env.BUN_INSTALL_CACHE_DIR,f=process.env.RAPIDKIT_DEP_SHARING_MODE,u=process.env.RAPIDKIT_WORKSPACE_PATH;return process.env.RAPIDKIT_DEP_SHARING_MODE=n,a&&(process.env.RAPIDKIT_WORKSPACE_PATH=a),r==="bun"?process.env.BUN_INSTALL_CACHE_DIR=b.join(i,"bun-cache"):r==="pnpm"?(process.env.npm_config_store_dir=b.join(i,"pnpm-store"),process.env.npm_config_cache=b.join(i,"pnpm-cache")):r==="yarn"?process.env.npm_config_cache=b.join(i,"yarn-cache"):process.env.npm_config_cache=b.join(i,"npm-cache"),o().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof l>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=l,typeof p>"u"?delete process.env.BUN_INSTALL_CACHE_DIR:process.env.BUN_INSTALL_CACHE_DIR=p,typeof f>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=f,typeof u>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=u;})}detectPackageManager(e){if($.existsSync(b.join(e,"bun.lock"))||$.existsSync(b.join(e,"bun.lockb")))return "bun";if($.existsSync(b.join(e,"package-lock.json")))return "npm";if($.existsSync(b.join(e,"pnpm-lock.yaml")))return "pnpm";if($.existsSync(b.join(e,"yarn.lock")))return "yarn";if(!this.commandAvailable("npm")){if(this.commandAvailable("pnpm"))return "pnpm";if(this.commandAvailable("yarn"))return "yarn"}return "npm"}hasPinnedPackageManager(e){return $.existsSync(b.join(e,"package-lock.json"))||$.existsSync(b.join(e,"bun.lock"))||$.existsSync(b.join(e,"bun.lockb"))||$.existsSync(b.join(e,"pnpm-lock.yaml"))||$.existsSync(b.join(e,"yarn.lock"))}availablePackageManagers(e){let r=this.detectPackageManager(e);return this.hasPinnedPackageManager(e)?[r]:[r,...["npm","pnpm","yarn","bun"].filter(n=>n!==r&&this.commandAvailable(n))]}commandAvailable(e){let r=e$f(e);return spawnSync(r.command,[...r.prefixArgs,"--version"],{stdio:"ignore",shell:c$i(),env:g$a()}).status===0}scriptArgs(e,r){return e==="npm"?["run-script",r,"--foreground-scripts"]:["run",r]}async runScriptWithFallback(e,r){let o={exitCode:1};for(let n of this.availablePackageManagers(e))if(o=await this.withDependencyEnv(e,n,()=>this.run(n,this.scriptArgs(n,r),e)),o.exitCode===0)return o;return {...o,message:o.message??`Node lifecycle script failed. Re-run \`${z$1(e,r)}\` in ${e} to inspect the native tool output.`}}async runLifecycle(e,r){let o=j$2(e),n=m$3(e,o),a=u$1(e,r,{framework:n.key});return a?this.runScriptWithFallback(e,a.scriptName):{exitCode:1,message:`No npm script available for \`${r}\`. Add a "${r}" script to package.json.`}}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let r=this.detectPackageManager(e);return this.withDependencyEnv(e,r,async()=>{try{return process.env.npm_config_cache&&$.mkdirSync(process.env.npm_config_cache,{recursive:true}),r==="pnpm"&&process.env.npm_config_store_dir&&$.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let r=this.detectPackageManager(e),o=this.resolveDependencyMode(e),n=o==="shared-runtime-caches"||o==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,r,()=>this.run(r,n,e))}async runDev(e){return this.runLifecycle(e,"dev")}async runTest(e){return this.runLifecycle(e,"test")}async runBuild(e){return this.runLifecycle(e,"build")}async runStart(e){return this.runLifecycle(e,"start")}async runLint(e){return this.runLifecycle(e,"lint")}async runFormat(e){return this.runLifecycle(e,"format")}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var vn=class{constructor(e){this.runCore=e;}runCore;runtime="python";async run(e,r){return {exitCode:await this.withPythonCacheEnv(r,()=>this.runCore(e,r))}}findWorkspaceRoot(e){let r=e;for(;;){if($.existsSync(b.join(r,".workspai-workspace"))||$.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=t$1(o,"policies.yml").find(a=>$.existsSync(a));if(!n)return "isolated";try{let c=$.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","python"):b.join(e,".workspai","cache","python"),i=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=b.join(a,"pip"),process.env.POETRY_CACHE_DIR=b.join(a,"poetry"),r().finally(()=>{typeof i>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=i,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),r=await this.run(["doctor","check"],e);return r.exitCode===0?r:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx workspai doctor workspace" for a full workspace scan.','Use "npx workspai init" after adding or changing modules.',"Use `npx workspai <command>` from the project root to avoid environment drift."]}};var Pn=class{constructor(e){this.runCommand=e;}runCommand;runtime="php";async run(e,r,o){let n=await this.runCommand(e,r,o);return n===0?{exitCode:n}:{exitCode:n,message:`PHP lifecycle command failed (${e} ${r.join(" ")}). Ensure ${e} is available on PATH, then review composer.json and the command diagnostics above.`}}hasComposer(e){return $.existsSync(b.join(e,"composer.json"))}hasArtisan(e){return $.existsSync(b.join(e,"artisan"))}hasComposerScript(e,r){try{let o=JSON.parse($.readFileSync(b.join(e,"composer.json"),"utf8"));return !!o.scripts&&Object.prototype.hasOwnProperty.call(o.scripts,r)}catch{return  false}}missingManifest(){return {exitCode:1,message:"composer.json was not found. Run the command from a PHP project root."}}unsupported(e){return {exitCode:1,message:`No deterministic PHP ${e} command was detected. Add a "${e}" Composer script or the expected Laravel tooling.`}}async checkPrereqs(){let e=await this.run("php",["--version"],process.cwd());return e.exitCode!==0?e:this.run("composer",["--version"],process.cwd())}async initProject(e){return this.hasComposer(e)?this.run("composer",["install","--no-interaction"],e):this.missingManifest()}async runDev(e){return this.hasComposerScript(e,"dev")?this.run("composer",["run-script","dev"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("dev")}async runTest(e){return this.hasArtisan(e)?this.run("php",["artisan","test"],e):this.hasComposerScript(e,"test")?this.run("composer",["run-script","test"],e):this.unsupported("test")}async runBuild(e){return this.hasComposerScript(e,"build")?this.run("composer",["run-script","build"],e):this.unsupported("build")}async runStart(e){return this.hasComposerScript(e,"start")?this.run("composer",["run-script","start"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("start")}async runLint(e){for(let r of ["lint","analyse","analyze"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return this.unsupported("lint")}async runFormat(e){for(let r of ["format","fmt"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return $.existsSync(b.join(e,"vendor","bin","pint"))||$.existsSync(b.join(e,"pint.json"))?this.run("php",["vendor/bin/pint"],e):this.unsupported("format")}async doctorHints(e){return ["Install a supported PHP release and Composer, then keep both on PATH.","Commit composer.lock for deterministic application installs.","Expose test, lint, format, and build commands as Composer scripts when the framework does not provide them."]}};var bn=class{constructor(e){this.runCommand=e;}runCommand;runtime="rust";async run(e,r){let o=await this.runCommand("cargo",e,r);return o===0?{exitCode:o}:{exitCode:o,message:`Cargo command failed (cargo ${e.join(" ")}). Ensure the stable Rust toolchain and cargo are available on PATH, then review Cargo.toml and the command diagnostics above.`}}hasManifest(e){return $.existsSync(b.join(e,"Cargo.toml"))}missingManifest(){return {exitCode:1,message:"Cargo.toml was not found. Run the command from a Rust project root."}}async checkPrereqs(){return this.run(["--version"],process.cwd())}async initProject(e){return this.hasManifest(e)?this.run(["fetch"],e):this.missingManifest()}async runDev(e){return this.hasManifest(e)?this.run(["run"],e):this.missingManifest()}async runTest(e){return this.hasManifest(e)?this.run(["test","--all-targets"],e):this.missingManifest()}async runBuild(e){return this.hasManifest(e)?this.run(["build","--release"],e):this.missingManifest()}async runStart(e){return this.hasManifest(e)?this.run(["run","--release"],e):this.missingManifest()}async runLint(e){return this.hasManifest(e)?this.run(["clippy","--all-targets","--all-features","--","-D","warnings"],e):this.missingManifest()}async runFormat(e){return this.hasManifest(e)?this.run(["fmt","--all"],e):this.missingManifest()}async doctorHints(e){return ["Install the Rust toolchain with rustup and ensure cargo is on PATH.","Use Cargo.lock for deterministic application builds.","Install rustfmt and clippy components for format and lint lifecycle commands."]}};function ig(){let t={...process.env},e=t.PATH||"";if(e){let r=e.split(b.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter);t.PATH=r;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||i$4(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function Xe(t,e){return t==="go"?new hn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="node"?new yn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="java"?new wn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="dotnet"?new fn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="rust"?new bn((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="php"?new Pn((r,o,n)=>e.runCommandInCwd(r,o,n)):new vn((r,o)=>e.runCoreRapidkit(r,{cwd:o,env:ig()}))}var ed=b.join(ja.homedir(),".workspai","cache"),td=1440*60*1e3;function ss(){let t=f$3("CACHE_DIR");if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?b.join(ed,`vitest-${e}`):ed}var Cn=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return b.join(ss(),`${this.getCacheKey(e)}.json`)}getTempCachePath(e){let r=`${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;return `${e}.${r}.tmp`}async get(e$1,r="1.0"){let o=this.memoryCache.get(e$1);if(o&&o.version===r&&Date.now()-o.timestamp<td)return e.debug(`Cache hit (memory): ${e$1}`),o.data;try{let n=this.getCachePath(e$1),a=await promises.readFile(n,"utf-8"),i=JSON.parse(a);if(i.version===r&&Date.now()-i.timestamp<td)return e.debug(`Cache hit (disk): ${e$1}`),this.memoryCache.set(e$1,i),i.data;await promises.unlink(n).catch(()=>{});}catch{e.debug(`Cache miss: ${e$1}`);}return null}async set(e$1,r,o="1.0"){let n={data:r,timestamp:Date.now(),version:o};this.memoryCache.set(e$1,n);try{await promises.mkdir(ss(),{recursive:true});let a=this.getCachePath(e$1),i=this.getTempCachePath(a);await promises.writeFile(i,JSON.stringify(n),"utf-8"),await promises.rename(i,a),e.debug(`Cache set: ${e$1}`);}catch(a){e.debug(`Cache write failed: ${e$1}`,a);}}async invalidate(e$1){this.memoryCache.delete(e$1);try{let r=this.getCachePath(e$1);await promises.unlink(r),e.debug(`Cache invalidated: ${e$1}`);}catch{}}async clear(){this.memoryCache.clear();try{let e$1=ss(),r=await promises.readdir(e$1);await Promise.all(r.map(o=>promises.unlink(b.join(e$1,o)))),e.debug("Cache cleared");}catch{}}};function rd(t){let e=C(t);return e?`Workspai project found at ${e}, but no Python virtual environment or activation script is available.`:"No Workspai project metadata, Python virtual environment, or activation script was found in this directory or its parents."}function Ne(t,e,r,o,n="process",a){return {id:t,label:e,order:r,layoutHint:n,...o?{parentId:o}:{},...a?{group:a}:{}}}function pg(t){return t.slice(1).map((e,r)=>{let o=t[r];return {id:`${o.id}->${e.id}`,from:o.id,to:e.id,kind:e.layoutHint==="gate"?"gate":e.layoutHint==="sink"?"handoff":"sequence",order:r+1}})}var dg=[["workspace.intelligence.preflight.sync","Sync","source","DISCOVER"],["workspace.intelligence.stage.model","Model + Graph","process","UNDERSTAND"],["workspace.intelligence.preflight.baseline","Baseline","process","UNDERSTAND"],["workspace.intelligence.stage.diff","Diff","process","UNDERSTAND"],["workspace.intelligence.stage.impact","Impact","process","UNDERSTAND"],["workspace.intelligence.stage.doctor-evidence","Doctor","gate","ASSURE"],["workspace.intelligence.stage.contract-evidence","Contracts","gate","ASSURE"],["workspace.intelligence.stage.analyze-evidence","Analyze","gate","ASSURE"],["workspace.intelligence.stage.readiness-evidence","Readiness","gate","ASSURE"],["workspace.intelligence.stage.verify","Verify","gate","ASSURE"],["workspace.intelligence.stage.context","Context","process","PUBLISH"],["workspace.intelligence.stage.agent-sync","Agent Sync","process","PUBLISH"],["workspace.intelligence.stage.explain","Explain","sink","PUBLISH"]];function so(t,e,r){return {id:t,version:3,nodes:[e,...r],edges:pg(r)}}function od(t){let e=t.filter(a=>!a.startsWith("-")&&/^[a-z][a-z0-9-]*$/i.test(a)).slice(0,3),r=e.slice(0,3).join(".")||"cli",o=`command.${r}`,n=Ne(o,e.join(" ")||"Workspai command",0,void 0,"source");if(e[0]==="workspace"&&e[1]==="intelligence"){let a=dg.map(([i,c,l,p],f)=>Ne(i,c,f+1,o,l,p));return so(`cli.${r}`,n,a)}return e[0]==="adopt"?so(`cli.${r}`,n,[Ne("adopt.resolve","Resolve",1,o,"source","DISCOVER"),Ne("adopt.detect","Detect",2,o,"process","DISCOVER"),Ne("adopt.link","Link",3,o,"process","CONNECT"),Ne("adopt.publish","Seal Intelligence",4,o,"gate","PUBLISH"),Ne("adopt.ground","Agent Entry",5,o,"sink","PUBLISH")]):e[0]==="workspace"&&e[1]==="run"?so(`cli.${r}`,n,[Ne("workspace.run.resolve","Resolve Fleet",1,o,"source","DISCOVER"),Ne("workspace.run.gates","Gates",2,o,"gate","ASSURE"),Ne("workspace.run.execute","Execute",3,o,"process","EXECUTE"),Ne("workspace.run.publish","Publish",4,o,"sink","PUBLISH")]):e[0]==="doctor"?so(`cli.${r}`,n,[Ne("doctor.observe","Observe",1,o,"source","OBSERVE"),Ne("doctor.diagnose","Diagnose",2,o,"process","DIAGNOSE"),Ne("doctor.plan","Plan",3,o,"process","DECIDE"),Ne("doctor.verify","Verify",4,o,"gate","VERIFY")]):e[0]==="workspace"&&e[1]==="repair"?so(`cli.${r}`,n,[Ne("repair.observe","Observe",1,o,"source","OBSERVE"),Ne("repair.plan","Plan",2,o,"process","DECIDE"),Ne("repair.authorize","Authorize",3,o,"gate","AUTHORIZE"),Ne("repair.execute","Execute",4,o,"process","EXECUTE"),Ne("repair.verify","Verify",5,o,"gate","VERIFY")]):{id:`cli.${r}`,version:3,nodes:[n],edges:[]}}var io=["list","sync","registry","foundation","intelligence","model","snapshot","diff","impact","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp","policy","contract","share","export","archive","hydrate","import","connect","run","init"],Sn=["intelligence","model","snapshot","diff","impact","contract","verify","goal","graph","watch","context","agent-sync","remediation-plan","repair","explain","why","trace","feedback","eval","mcp"];function nd(t){return Sn.includes(t)}var ad="workspai-project-entry-capability-v1";var is="workspai-cli-runtime-command-inventory-v1",En=[...w$2,"autopilot","pipeline","import","adopt","goal","change","agent","snapshot","live","bootstrap","setup","cache","mirror","ai","config","product","infra","shell","commands","create","project"],cs=["bootstrap","setup","cache","mirror"],An="create",ug=[...cs,An],mg={bootstrap:"Bootstrap project or workspace dependencies through runtime-aware setup rules.",setup:"Prepare a selected runtime toolchain through the supported adapter boundary.",cache:"Inspect or clear Workspai cache state through the managed cache boundary.",mirror:"Coordinate supported mirror lifecycle operations for the current project.",create:"Create a supported workspace or project through the canonical planner boundary."},Rn=[["ai","generate-embeddings"],["ai","info"],["ai","recommend"],["ai","update-embeddings"],["agent","bootstrap"],["agent","framework"],["agent","framework","list"],["agent","framework","plan"],["agent","framework","attach"],["agent","framework","apply"],["config","ai"],["config","remove-api-key"],["config","set-api-key"],["config","show"],["change","begin"],["change","list"],["change","predict"],["change","authorize"],["change","resume"],["change","effect"],["change","effect","record"],["change","verification"],["change","verification","record"],["change","status"],["change","explain"],["change","verify"],["change","abort"],["change","capsule"],["change","capsule","validate"],["change","capsule","export"],["infra","down"],["infra","plan"],["infra","status"],["infra","up"],["product","manifest"],["product","manifest","create"],["product","plan"],["project","commands"],["project","agent-entry"],["project","coverage"],["project","workspace"],["project","archives"],["project","archive"],["project","restore"],["project","delete"],["snapshot","create"],["snapshot","inspect"],["snapshot","list"],["snapshot","restore"]];function gg(t,e,r,o){let n=new Set(t),a=new Set(e),i=t.filter(g=>!a.has(g)).sort(),c=e.filter(g=>!n.has(g)).sort(),l=new Set(r),p=new Set(o),f=r.filter(g=>!p.has(g)).sort(),u=o.filter(g=>!l.has(g)).sort();return {ok:i.length===0&&c.length===0&&f.length===0&&u.length===0,registeredButUndeclared:i,declaredButUnregistered:c,registeredScopedButUndeclared:f,declaredScopedButUnregistered:u}}function sd(t,e=[]){return t.commands.flatMap(r=>{let o=r.name(),n=[...e,o];return [{path:n,command:o,parent:e.length>0?e.join(" "):null,registrationKind:"commander",aliases:r.aliases?.()??[],description:r.description?.()??"",hidden:r._hidden===true,arguments:(r.registeredArguments??[]).map(i=>({name:i.name(),required:i.required,variadic:i.variadic})),options:(r.options??[]).map(i=>({flags:i.flags,attributeName:i.attributeName?.()??null}))},...sd(r,n)]})}function id(t){let e=sd(t),r=e.filter(c=>c.path.length===1).map(c=>c.command),o=new Set(r),n=ug.filter(c=>!o.has(c)).map(c=>({path:[c],command:c,parent:null,registrationKind:"manual-handler",aliases:[],description:mg[c],hidden:false,arguments:[],options:[]})),a=[...e,...n].sort((c,l)=>c.path.join(" ").localeCompare(l.path.join(" "))),i=[...new Set(a.filter(c=>c.path.length===1).map(c=>c.command))].sort();return {schemaVersion:is,commands:a,topLevelCommands:i,integrity:gg(i,En,e.filter(c=>c.path.length>1).map(c=>c.path.join(" ")),Rn.map(c=>c.join(" ")))}}function cd(t){return `CLI command surface integrity violation (${[t.registeredButUndeclared.length>0?`registered but undeclared: ${t.registeredButUndeclared.join(", ")}`:null,t.declaredButUnregistered.length>0?`declared but unreachable: ${t.declaredButUnregistered.join(", ")}`:null,t.registeredScopedButUndeclared.length>0?`registered scoped but undeclared: ${t.registeredScopedButUndeclared.join(", ")}`:null,t.declaredScopedButUnregistered.length>0?`declared scoped but unreachable: ${t.declaredScopedButUnregistered.join(", ")}`:null].filter(r=>r!==null).join("; ")})`}var fg={"--workspace":"Use an explicit workspace root instead of the nearest workspace.","--json":"Emit machine-readable JSON.","--strict":"Return a non-zero exit when governed evidence blocks the result.","--for-agent":"Build output for an agent surface (for example codex, copilot, or cursor).","--include-paths":"Include absolute filesystem paths.","--include-evidence":"Read and include referenced evidence metadata.","--scan-depth":"Set the bounded observable-project discovery depth.","--cache":"Reuse the model cache when the structural inputs are unchanged.","--refresh-graph":"Bypass the compatible persisted graph and rebuild from live sources.","--incremental":"Reuse unchanged projects and rebuild affected graph relations.","--write":"Persist the command artifact under .workspai/reports.","--scope":"Limit the operation to a bounded scope such as project:<name>.","--kind":"Limit graph entity search to one canonical entity kind.","--dry-run":"Preview the operation without applying writes.","--preset":"Select the generated agent customization preset.","--refresh-context":"Rebuild agent context before synchronization.","--refresh":"Refresh the underlying registry or context before reading it.","--agent-sync":"Synchronize agent grounding after writing the context artifact.","--no-agent-sync":"Do not synchronize agent grounding after writing context.","--target":"Select one or more agent customization targets.","--experimental-hooks":"Generate advisory VS Code agent hook design files.","--hydrate-prompts":"Add workspace-specific verification steps to supported prompts.","--project-grounding":"Select the project entrypoint policy: managed, local, or off.","--ci":"Produce a CI-oriented command plan.","--from":"Read the specified baseline, report, or graph artifact.","--from-impact":"Read the specified impact report for verification.","--output":"Write the requested export or report to this path.","--limit":"Bound graph query results (1\u2013100).","--once":"Build the initial observed state and exit.","--graph-stream":"Emit graph snapshot/delta events as NDJSON.","--force":"Replace an existing generated target where supported.","--no-doctor":"Exclude Doctor evidence from a share bundle.","--no-blueprint":"Exclude the reproducibility blueprint from a share bundle.","--include-env":"Include private environment files in an export archive.","--archive-compression":"Select the archive compression format.","--max-download-size":"Bound a remote archive download.","--max-expanded-size":"Bound the expanded archive size.","--download-timeout-ms":"Bound remote archive download time.","--allow-private-network":"Allow private-network archive sources explicitly.","--affected":"Run only projects affected by the selected Git change.","--blast-radius":"Include transitive downstream dependents.","--since":"Select the Git baseline used for affected-project discovery.","--parallel":"Run selected projects concurrently.","--plan":"Resolve lifecycle commands without executing project code.","--runtime":"Limit lifecycle planning or execution to one detected runtime family.","--max-workers":"Bound concurrent project workers.","--continue-on-error":"Continue remaining projects after a project failure.","--reuse-passed":"Reuse successful project-stage results where safe.","--no-gates":"Skip Doctor and Readiness pre-run gates.","--allow-breaking":"Allow a verified goal to use breaking dependency changes.","--allow-force":"Allow a verified goal to use force-based repair commands.","--card":"Select the dashboard card whose governed remediation actions should be repaired.","--action-id":"Select one exact governed remediation action.","--project":"Limit the repair transaction to one registered project name.","--proposal":"Read a bounded model repair proposal from a JSON file inside the workspace.","--transaction":"Select one durable repair transaction by id.","--approved-by":"Record the local actor approving the immutable repair plan.","--decision":"Submit one of the exact options exposed by a decision-required transaction.","--max-risk":"Set the maximum approved repair risk: safe, guarded, or invasive.","--no-auto-rollback":"Require a decision instead of automatically restoring a failed transaction.","--no-build":"Do not require build validation for the selected verified goal.","--no-tests":"Do not require test validation for the selected verified goal.","--no-run":"Read current goal evidence without executing verification commands.","--reuse-intelligence":"Reuse a just-completed canonical intelligence run while executing goal-specific checks."},co={list:{usage:"workspai workspace list [--json]",summary:"List registered Workspai workspaces.",flags:["--json"],examples:["workspai workspace list","workspai workspace list --json"]},intelligence:{usage:"workspai workspace intelligence run [--for-agent <agent>] [--strict] [--json]",summary:"Run the canonical Workspace Intelligence chain in contract order.",flags:["--workspace","--json","--strict","--for-agent"],subactions:["run"],artifact:p.intelligenceRun,examples:["workspai workspace intelligence run --strict","workspai workspace intelligence run --for-agent codex --json"]},model:{usage:"workspai workspace model [--cache|--incremental] [--write] [--strict] [--json]",summary:"Build the canonical workspace model from registered and observed sources.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth","--cache","--incremental","--write","--strict"],artifact:p.model,examples:["workspai workspace model --write --json","workspai workspace model --incremental --write --json"]},"agent-sync":{usage:"workspai workspace agent-sync [--for-agent <agent>] [--target <targets>] [--project-grounding <mode>] [--write]",summary:"Synchronize bounded workspace grounding for supported agent surfaces.",flags:["--workspace","--json","--scope","--for-agent","--write","--dry-run","--strict","--preset","--refresh-context","--refresh","--target","--experimental-hooks","--hydrate-prompts","--project-grounding"],artifact:p.agentCustomizationPack,examples:["workspai workspace agent-sync --target all --write --strict","workspai workspace agent-sync --for-agent copilot --dry-run --json"]},"remediation-plan":{usage:"workspai workspace remediation-plan [--ci] [--write] [--json]",summary:"Build a governed repair plan from current workspace evidence.",flags:["--workspace","--json","--include-paths","--ci","--write"],artifact:t.artifactRemediationPlan,examples:["workspai workspace remediation-plan --write --json","workspai workspace remediation-plan --ci --json"]},repair:{usage:"workspai workspace repair <capabilities|plan|propose|approve|decide|execute|resume|status|list|rollback|cancel> [--transaction <id>] [--json]",summary:"Run a durable, approval-bound repair transaction through checkpoint, validation, canonical verification, and rollback.",flags:["--workspace","--json","--card","--action-id","--project","--proposal","--transaction","--approved-by","--decision","--max-risk","--allow-breaking","--allow-force","--no-auto-rollback"],subactions:["capabilities","plan","propose","approve","decide","execute","resume","status","list","rollback","cancel"],artifact:p.repairTransaction,examples:["workspai workspace repair capabilities --json","workspai workspace repair plan --card doctor --project api --json","workspai workspace repair propose --proposal .workspai/repair/inbox/proposal.json --json","workspai workspace repair approve --transaction repair_123 --approved-by local-user --json","workspai workspace repair decide --transaction repair_123 --decision approve-invasive --json","workspai workspace repair execute --transaction repair_123 --json","workspai workspace repair rollback --transaction repair_123 --json"]},context:{usage:"workspai workspace context [--for-agent <agent>] [--scope <scope>] [--write] [--json]",summary:"Build a bounded, evidence-backed context pack for people and agents.",flags:["--workspace","--json","--for-agent","--scope","--include-evidence","--scan-depth","--write","--agent-sync","--no-agent-sync","--preset","--target","--strict","--project-grounding"],artifact:p.agentContext,examples:["workspai workspace context --for-agent codex --write --json","workspai workspace context --scope project:api --json"]},snapshot:{usage:"workspai workspace snapshot [--json]",summary:"Persist the current model as the comparison baseline.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth"],artifact:p.snapshot,examples:["workspai workspace snapshot --json"]},diff:{usage:"workspai workspace diff --from <snapshot-or-model|git[:ref]> [--strict] [--json]",summary:"Compare the current model with a trusted model baseline.",flags:["--workspace","--json","--from","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.diff,examples:["workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","workspai workspace diff --from git --json"]},impact:{usage:"workspai workspace impact --from <diff> [--scope <scope>] [--strict] [--json]",summary:"Calculate the evidence-backed blast radius of the current model change.",flags:["--workspace","--json","--from","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.impact,examples:["workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json","workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --strict --json"]},verify:{usage:"workspai workspace verify [--from-impact <impact-report>] [--scope <scope>] [--strict] [--json]",summary:"Verify the selected change against contracts, gates, and current evidence.",flags:["--workspace","--json","--from-impact","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:p.verify,examples:["workspai workspace verify --strict --json","workspai workspace verify --from-impact .workspai/reports/workspace-impact-last-run.json --json"]},goal:{usage:"workspai workspace goal <plan|status|verify> <kind|goal-id> [--scope <scope>] [--runtime <runtime>] [--target <percent>] [--json]",summary:"Plan, resume, and evidence-verify a durable engineering goal for people and agents.",flags:["--workspace","--json","--scope","--runtime","--target","--allow-breaking","--allow-force","--no-build","--no-tests","--no-run","--reuse-intelligence"],flagDescriptions:{"--runtime":"Select the runtime measured by a test-coverage goal.","--target":"Set the required test coverage percentage (0\u2013100)."},subactions:["plan","status","verify"],artifact:p.verifiedGoalStatus,examples:["workspai workspace goal plan release-readiness --json","workspai workspace goal plan dependency-security --scope project:api --json","workspai workspace goal plan test-coverage --scope project:web --runtime node --target 75 --json","workspai workspace goal verify <goal-id> --json"]},graph:{usage:"workspai workspace graph [mode] [query|from] [to] [--json]",summary:"Query and export the canonical Knowledge Graph; explain, dot, and mermaid target the project dependency topology.",flags:["--workspace","--json","--output","--from","--limit","--kind","--refresh-graph","--include-paths","--include-evidence","--scan-depth","--scope","--write"],subactions:["emit","explain","entities","search","evidence","path","overlay","benchmark","benchmark-suite","dot","mermaid","jsonld","graphml","gexf"],examples:['workspai workspace graph search "authentication endpoint" --kind endpoint --limit 12 --json','workspai workspace graph evidence "GET /users" --json',"workspai workspace graph benchmark-suite agent-core.v1 --write --json","workspai workspace graph mermaid"]},watch:{usage:"workspai workspace watch [--once] [--graph-stream] [--json]",summary:"Observe model changes and optionally stream graph deltas.",flags:["--workspace","--json","--once","--graph-stream","--scan-depth"],examples:["workspai workspace watch --once --json","workspai workspace watch --graph-stream"]},sync:{usage:"workspai workspace sync [--project-grounding <mode>] [--json]",summary:"Synchronize canonical workspace registration and project metadata.",flags:["--workspace","--json","--project-grounding"],examples:["workspai workspace sync --json"]},registry:{usage:"workspai workspace registry [--refresh] [--json]",summary:"Inspect the canonical workspace registry summary.",flags:["--workspace","--json","--refresh"],examples:["workspai workspace registry --refresh --json"]},foundation:{usage:"workspai workspace foundation [--force] [--json]",summary:"Create or repair the standard workspace foundation files.",flags:["--workspace","--json","--force"],examples:["workspai workspace foundation --json"]},policy:{usage:"workspai workspace policy [show|status|get|set] [key] [value] [--json]",summary:"Inspect or update workspace governance policy.",flags:["--workspace","--json"],subactions:["show","status","get","set"],examples:["workspai workspace policy get --json"]},contract:{usage:"workspai workspace contract [init|inspect|sync|verify|graph] [--strict] [--json]",summary:"Create, inspect, synchronize, verify, or project the workspace contract.",flags:["--workspace","--json","--output","--force","--strict"],subactions:["init","inspect","sync","verify","graph"],artifact:t.workspaceContract,examples:["workspai workspace contract sync --strict --json","workspai workspace contract verify --strict --json","workspai workspace contract graph --json"]},share:{usage:"workspai workspace share [--output <file>] [--json]",summary:"Create a bounded, shareable workspace evidence bundle.",flags:["--workspace","--json","--output","--include-paths","--no-doctor","--no-blueprint"],examples:["workspai workspace share --output workspace-share.json --json"]},export:{usage:"workspai workspace export [--output <archive>] [--archive-compression <format>]",summary:"Export a portable workspace archive.",flags:["--workspace","--json","--output","--include-env","--archive-compression"],examples:["workspai workspace export --output workspace.tar.gz"]},archive:{usage:"workspai workspace archive <inspect|verify|doctor> <source> [safety options] [--json]",summary:"Inspect, verify, or diagnose a portable workspace archive without materializing it.",flags:["--json","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],subactions:["inspect","verify","doctor"],examples:["workspai workspace archive inspect ./workspace.tar.gz --json","workspai workspace archive verify ./workspace.tar.gz --strict --json","workspai workspace archive doctor ./workspace.tar.gz --json"]},hydrate:{usage:"workspai workspace hydrate <source> [--output <directory>] [--dry-run] [--json]",summary:"Hydrate a portable workspace into a controlled destination.",flags:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace hydrate workspace.tar.gz --output ./restored --dry-run --json"]},import:{usage:"workspai workspace import <source> [--output <directory>] [--dry-run] [--json]",summary:"Verify, materialize, register, relink, and reconcile a portable workspace archive safely.",flags:["--json","--output","--dry-run","--strict","--project-grounding","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace import workspace.tar.gz --output ./imported --json"]},connect:{usage:"workspai workspace connect [directory] [--project-grounding <mode>] [--dry-run] [--json]",summary:"Register and reconcile an existing Workspai workspace in place without moving its source.",flags:["--json","--dry-run","--project-grounding"],examples:["workspai workspace connect /path/to/existing-workspace --json"]},run:{usage:"workspai workspace run <stage> [selection and concurrency options] [--json]",summary:"Run a lifecycle stage across selected workspace projects.",flags:["--workspace","--json","--scope","--plan","--runtime","--affected","--blast-radius","--since","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],subactions:["init","test","build","start","<custom-from-context>"],artifact:t.workspaceRunLast,examples:["workspai workspace run test --scope project:api --plan --runtime ruby --json","workspai workspace run test --affected --blast-radius --strict","workspai workspace run build --parallel --max-workers 4 --json"]},explain:{usage:"workspai workspace explain [target] [--scope <scope>] [--write] [--json]",summary:"Explain current blockers or a selected workspace target from evidence.",flags:["--workspace","--json","--scope","--write"],artifact:p.explain,examples:["workspai workspace explain --write --json"]},why:{usage:"workspai workspace why [target] [--scope <scope>] [--write] [--json]",summary:"Alias the evidence-backed workspace explanation flow.",flags:["--workspace","--json","--scope","--write"],artifact:d$5,examples:["workspai workspace why readiness --json"]},trace:{usage:"workspai workspace trace --from <diff-artifact> [--write] [--json]",summary:"Trace a model change through blast radius and decision gates.",flags:["--workspace","--json","--from","--write"],artifact:e$3,examples:["workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --write --json"]},feedback:{usage:"echo '<event-json>' | workspai workspace feedback record --json",summary:"Record a structured outcome event for the workspace intelligence history.",flags:["--workspace","--json"],subactions:["record"],examples:[`echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | workspai workspace feedback record --json`]},eval:{usage:"workspai workspace eval [init|record|status|report|compare] [arguments] [--json]",summary:"Measure agent/model calls, tool use, tokens, latency, and verified outcome.",flags:["--workspace","--json","--from","--output"],subactions:["init","record","status","report","compare"],artifact:p.evaluationLastRun,examples:["workspai workspace eval init repair-readiness workspace-intelligence --json","workspai workspace eval report --output ./evaluation.json --json"]},mcp:{usage:"workspai workspace mcp serve",summary:"Serve bounded, read-mostly workspace evidence over stdio MCP.",flags:["--workspace","--json"],subactions:["serve"],examples:["workspai workspace mcp serve"]},init:{usage:"workspai workspace init [selection and concurrency options] [--json]",summary:"Initialize all selected projects through the workspace fleet runner.",flags:["--workspace","--json","--scope","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],artifact:t.workspaceRunLast,examples:["workspai workspace init --parallel --strict"]}};function ls(t){if(t)return co[t]}function ld(t){return t[0]==="workspace"&&!!ls(t[1])&&t.slice(2).some(e=>e==="--help"||e==="-h")}function pd(t,e){let r=ls(e)?.flagDescriptions?.[t]??fg[t];if(!r)throw new Error(`Workspace action flag has no description: ${t}`);return r}function dd(t){let e=ls(t);if(!e)throw new Error(`Unknown workspace action: ${t}`);let r=[`Workspai workspace ${t}`,"",e.summary,"","Usage:",`  ${e.usage}`];if(e.subactions&&e.subactions.length>0&&r.push("","Modes:",`  ${e.subactions.join(" | ")}`),e.flags.length>0){r.push("","Options:");for(let o of e.flags){let n=pd(o,t);r.push(`  ${o.padEnd(24)} ${n}`.trimEnd());}}return e.artifact&&r.push("","Evidence:",`  ${e.artifact}`),r.push("","Examples:",...e.examples.map(o=>`  ${o}`),""),r.join(`
+`)}var ud="rapidkit-runtime-command-surface-v1";var ps=s$2.doctorRemediationPlan.schemaVersion;var md="workspai-workspace-intelligence-architecture-v1";var gd={autopilotRelease:s$2.autopilotReleaseLastRun.schemaVersion,workspaceList:"rapidkit-workspace-list-v1",workspaceSync:"rapidkit-workspace-sync-v1",compatibilityMatrix:s$2.compatibilityMatrix.schemaVersion,mcpDesign:s$2.workspaiMcpDesign.schemaVersion,agentHooks:s$2.agentHooks.schemaVersion,projectArchive:"rapidkit-project-archive-v1",workspaceSnapshot:"rapidkit-workspace-snapshot-v1",workspaceSnapshotV2:"rapidkit-workspace-snapshot-v2",infraPlan:s$2.infraPlan.schemaVersion,privateProductManifest:"rapidkit.private-product-manifest.v1",productFactoryPlan:"rapidkit.product-factory-plan.v1",workspaceModelCache:s$2.workspaceModelCache.schemaVersion,workspaceWatchEvent:"workspace-watch-event.v1",doctorProjectScan:"doctor-project-scan-v2",doctorWorkspaceCache:s$2.doctorWorkspaceCache.schemaVersion};var fd="project-workspace-resolution.v1";function hd(t){a$4(t,"contracts/project-workspace-resolution.v1.json","Project workspace resolution");}var ds="workspai.ingestion-plan.v1",xn="workspai.ingestion-result.v1",In="workspai.adopt-effects.v1";var wd="contracts/ingestion-result.v1.json";function Ut(t){return {schemaVersion:ds,...t}}var hg="workspai-published-contract-catalog-v1",wg="workspace-graph-stream.v1";function lo(){return {workspaceContract:1,runtimeCommandSurface:ud,cliRuntimeCommandInventory:is,cliOperationResult:a$M,publishedContractCatalog:hg,workspaceArchiveCapabilities:a$L,workspaceArchiveManifest:b$n,workspaceArchiveOperationResult:c$3,ingestionPlan:ds,ingestionResult:xn,adoptEffects:In,projectEntryCapability:ad,projectWorkspaceLink:s$2.projectWorkspaceLink.schemaVersion,projectWorkspaceResolution:fd,projectContextAgent:s$2.projectContextAgent.schemaVersion,projectKnowledgeGraphReference:s$2.projectKnowledgeGraphReference.schemaVersion,projectAgentEntry:a$K,agentBootstrapReceipt:c$g,doctorProjectEvidence:b$m,doctorWorkspaceEvidence:a$J,doctorGraphDiagnosis:b$l,doctorDiagnosis:a$I,doctorCapabilities:a$H,doctorValidation:c$f,doctorReceipt:s$2.doctorReceipt.schemaVersion,doctorSummary:c$e,projectTestCoverage:s$2.projectTestCoverage.schemaVersion,verifiedGoal:"workspai.verified-goal.v1",verifiedGoalStatus:q.verifiedGoalStatus,goalPack:a$G,goalAgentHandoff:b$k,goalPlanResult:c$d,goalIndex:e$c,goalLifecycleResult:g$8,decisionEvent:f$5,decisionTransaction:e$b,decisionCheckpoint:g$7,changeOperationResult:l$3,architectureChangeLease:h$3,predictedArchitectureChange:i$2,architectureSurpriseReport:j$7,proofCarryingChangeCapsule:k$4,proofCarryingChangeList:m$5,proofCarryingChangeCapsuleValidation:n$4,proofCarryingChangeCapsuleExport:o$4,workspaceIntelligenceArchitecture:md,workspaceIntelligenceChain:a$F,workspaceIntelligenceArtifacts:q,cliLogEvent:a$E,workspaceActivityEvent:a$D,workspaceActivityMonitorSnapshot:a$C,workspaceActivityMonitorFleet:b$j,workspaceActivityBoard:h$2,freshnessMetadata:c$c,factFreshness:e$a,blockerResolution:a$B,workspaceModel:l$2,workspaceImpact:f$4,workspaceVerify:c$b,workspaceContext:a$A,workspaceDependencyGraph:e$9,workspaceKnowledgeGraph:a$z,workspaceGraphStream:wg,workspaceKnowledgeGraphChangeOverlay:a$y,workspaceKnowledgeSearch:a$x,workspaceGraphTokenEfficiency:a$w,workspaceIntelligenceBenchmark:a$v,modelUsageEvent:a$u,workspaceIntelligenceEvaluation:b$i,workspaceIntelligenceEvaluationComparison:c$a,workspaceIntelligenceHistory:a$t,agentCustomizationPackCapabilities:c$9,agentFrameworkCapabilities:v$2,agentFrameworkAdapterManifest:w$1,agentFrameworkConformanceReport:x,agentFrameworkChangePlan:y,agentFrameworkOwnershipReceipt:z,agentFrameworkAdmissionCandidate:A,agentCustomizationPackReport:q.agentCustomizationPack,agentReportsIndex:q.agentIndex,workspaceOperationalSkill:a$s,workspaceSkillsIndex:b$h,workspaceExplain:a$r,agentActionOutcome:a$q,doctorRemediationPlan:ps,doctorDependencyRepairTransaction:"workspai.doctor-dependency-repair-transaction.v1",artifactRemediationPlan:a$p,studioCardRepairCapabilities:j$6,workspaceRepairProposal:e$8,workspaceRepairCapabilities:g$6,workspaceRepairTransaction:a$o,doctorFixResult:a$n,backendImportStackParitySnapshot:"backend-import-stack-parity-v1",bootstrapCompliance:s$2.bootstrapCompliance.schemaVersion,commandCapabilities:"rapidkit-command-capabilities-v1",createPlannerCapabilities:"rapidkit-create-planner-capabilities-v1",doctorRemediationPlanLegacy:ps,extensionCliCompatibility:"rapidkit-extension-cli-compatibility.v1",infraStack:"rapidkit.infra-stack.v1",mirrorOps:s$2.mirrorOps.schemaVersion,moduleLayout:"rapidkit.module-layout.v1",moduleSupport:"rapidkit-module-support-v1",pipelineLastRun:s$2.pipelineLastRun.schemaVersion,transparencyEvidence:s$2.transparencyEvidence.schemaVersion,version:"rapidkit-version-v1",studioBlockerHandoff:"rapidkit-studio-blocker-handoff-v1",workspaceRegistry:s$2.workspaceRegistry.schemaVersion,workspaceRunLast:s$2.workspaceRunLast.schemaVersion,workspaceShareBundle:s$2.workspaceShareBundle.schemaVersion,...gd}}function _n(){let t=lo(),e={workspaceContract:"contracts/workspace-contract.v1.json",runtimeCommandSurface:"contracts/runtime-command-surface.v1.json",cliRuntimeCommandInventory:"contracts/cli-runtime-command-inventory.v1.snapshot.json",cliOperationResult:"contracts/cli-operation-result.v1.json",publishedContractCatalog:"contracts/published-contract-catalog.v1.json",workspaceArchiveCapabilities:"contracts/workspace-archive-capabilities.v1.json",workspaceArchiveManifest:"contracts/workspace-archive-manifest.v1.json",workspaceArchiveOperationResult:"contracts/workspace-archive-operation-result.v1.json",ingestionPlan:"contracts/ingestion-plan.v1.json",ingestionResult:"contracts/ingestion-result.v1.json",adoptEffects:"contracts/adopt-effects.v1.json",projectEntryCapability:"contracts/project-entry-capability.v1.json",projectWorkspaceLink:"contracts/project-workspace-link.v1.json",projectWorkspaceResolution:"contracts/project-workspace-resolution.v1.json",projectContextAgent:"contracts/workspace-intelligence/project-context-agent.v1.json",projectKnowledgeGraphReference:"contracts/workspace-intelligence/project-knowledge-graph-reference.v1.json",projectAgentEntry:"contracts/workspace-intelligence/project-agent-entry.v1.json",agentBootstrapReceipt:"contracts/workspace-intelligence/agent-bootstrap-receipt.v1.json",doctorProjectEvidence:"contracts/doctor-project-evidence.v1.json",doctorWorkspaceEvidence:"contracts/doctor-workspace-evidence.v1.json",doctorGraphDiagnosis:"contracts/workspace-intelligence/doctor-graph-diagnosis.v1.json",doctorDiagnosis:"contracts/workspace-intelligence/doctor-diagnosis.v1.json",doctorCapabilities:"contracts/workspace-intelligence/doctor-capabilities.v1.json",doctorValidation:"contracts/workspace-intelligence/doctor-validation.v1.json",doctorReceipt:"contracts/workspace-intelligence/doctor-receipt.v1.json",doctorSummary:"contracts/workspace-intelligence/doctor-summary.v1.json",projectTestCoverage:"contracts/project-test-coverage.v1.json",verifiedGoal:"contracts/workspace-intelligence/verified-goal.v1.json",verifiedGoalStatus:"contracts/workspace-intelligence/verified-goal-status.v1.json",goalPack:"contracts/workspace-intelligence/goal-pack.v1.json",goalAgentHandoff:"contracts/workspace-intelligence/goal-agent-handoff.v1.json",goalPlanResult:"contracts/workspace-intelligence/goal-plan-result.v1.json",goalIndex:"contracts/workspace-intelligence/goal-index.v1.json",goalLifecycleResult:"contracts/workspace-intelligence/goal-lifecycle-result.v1.json",decisionEvent:"contracts/workspace-intelligence/decision-event.v1.json",decisionTransaction:"contracts/workspace-intelligence/decision-transaction.v1.json",decisionCheckpoint:"contracts/workspace-intelligence/decision-checkpoint.v1.json",changeOperationResult:"contracts/workspace-intelligence/change-operation-result.v1.json",architectureChangeLease:"contracts/workspace-intelligence/architecture-change-lease.v1.json",predictedArchitectureChange:"contracts/workspace-intelligence/predicted-architecture-change.v1.json",architectureSurpriseReport:"contracts/workspace-intelligence/architecture-surprise-report.v1.json",proofCarryingChangeCapsule:"contracts/workspace-intelligence/proof-carrying-change-capsule.v1.json",proofCarryingChangeList:"contracts/workspace-intelligence/proof-carrying-change-list.v1.json",proofCarryingChangeCapsuleValidation:"contracts/workspace-intelligence/proof-carrying-change-capsule-validation.v1.json",proofCarryingChangeCapsuleExport:"contracts/workspace-intelligence/proof-carrying-change-capsule-export.v1.json",workspaceIntelligenceArchitecture:"contracts/workspace-intelligence-architecture.v1.json",workspaceIntelligenceChain:"contracts/workspace-intelligence-chain.v1.json",workspaceIntelligenceArtifacts:null,cliLogEvent:"contracts/cli-log-event.v1.json",workspaceActivityEvent:"contracts/workspace-activity-event.v1.json",workspaceActivityMonitorSnapshot:"contracts/workspace-activity-monitor-snapshot.v1.json",workspaceActivityMonitorFleet:"contracts/workspace-activity-monitor-fleet.v1.json",workspaceActivityBoard:"contracts/workspace-activity-board.v1.json",freshnessMetadata:null,factFreshness:"contracts/workspace-intelligence/fact-freshness.v1.json",blockerResolution:"contracts/workspace-intelligence/blocker-resolution.v1.json",workspaceModel:"contracts/workspace-intelligence/workspace-model.v1.json",workspaceImpact:"contracts/workspace-intelligence/workspace-impact.v1.json",workspaceVerify:"contracts/workspace-intelligence/workspace-verify.v1.json",workspaceContext:"contracts/workspace-intelligence/workspace-context.v1.json",workspaceDependencyGraph:"contracts/workspace-intelligence/workspace-dependency-graph.v1.json",workspaceKnowledgeGraph:"contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",workspaceGraphStream:"contracts/workspace-intelligence/workspace-graph-stream.v1.json",workspaceKnowledgeGraphChangeOverlay:"contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",workspaceKnowledgeSearch:"contracts/workspace-intelligence/workspace-knowledge-search.v1.json",workspaceGraphTokenEfficiency:"contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",workspaceIntelligenceBenchmark:"contracts/workspace-intelligence/workspace-intelligence-benchmark.v1.json",modelUsageEvent:"contracts/workspace-intelligence/model-usage-event.v1.json",workspaceIntelligenceEvaluation:"contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",workspaceIntelligenceEvaluationComparison:"contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json",workspaceIntelligenceHistory:"contracts/workspace-intelligence/workspace-intelligence-history.v1.json",agentCustomizationPackCapabilities:"contracts/agent-customization-pack.v1.json",agentFrameworkCapabilities:"contracts/agent-framework-capabilities.v1.json",agentFrameworkAdapterManifest:"contracts/workspace-intelligence/agent-framework-adapter-manifest.v1.json",agentFrameworkConformanceReport:"contracts/workspace-intelligence/agent-framework-conformance-report.v1.json",agentFrameworkChangePlan:"contracts/workspace-intelligence/agent-framework-change-plan.v1.json",agentFrameworkOwnershipReceipt:"contracts/workspace-intelligence/agent-framework-ownership-receipt.v1.json",agentFrameworkAdmissionCandidate:"contracts/workspace-intelligence/agent-framework-admission-candidate.v1.json",agentCustomizationPackReport:"contracts/workspace-intelligence/agent-customization-pack-report.v1.json",agentReportsIndex:"contracts/workspace-intelligence/agent-reports-index.v1.json",workspaceOperationalSkill:"contracts/workspace-intelligence/workspace-operational-skill.v1.json",workspaceSkillsIndex:"contracts/workspace-intelligence/workspace-skills-index.v1.json",workspaceExplain:"contracts/workspace-intelligence/workspace-explain.v1.json",agentActionOutcome:"contracts/workspace-intelligence/agent-action-outcome.v1.json",doctorRemediationPlan:"contracts/doctor-remediation-plan.v2.json",doctorDependencyRepairTransaction:"contracts/workspace-intelligence/doctor-dependency-repair-transaction.v1.json",artifactRemediationPlan:"contracts/artifact-remediation-plan.v1.json",studioCardRepairCapabilities:"contracts/studio-card-repair-capabilities.v1.json",workspaceRepairProposal:"contracts/workspace-intelligence/workspace-repair-proposal.v1.json",workspaceRepairCapabilities:"contracts/workspace-repair-capabilities.v1.json",workspaceRepairTransaction:"contracts/workspace-intelligence/workspace-repair-transaction.v1.json",doctorFixResult:"contracts/workspace-intelligence/doctor-fix-result.v1.json",backendImportStackParitySnapshot:"contracts/backend-import-stack-parity.snapshot.json",bootstrapCompliance:"contracts/bootstrap-compliance.v1.json",commandCapabilities:"contracts/command-capabilities.v1.json",createPlannerCapabilities:"contracts/create-planner-capabilities.v1.json",doctorRemediationPlanLegacy:"contracts/doctor-remediation-plan.v1.json",extensionCliCompatibility:"contracts/extension-cli-compatibility.v1.json",infraStack:"contracts/infra-stack.v1.json",mirrorOps:"contracts/mirror-ops.v1.json",moduleLayout:"contracts/module-layout.v1.json",moduleSupport:"contracts/module-support.v1.json",pipelineLastRun:"contracts/pipeline-last-run.v1.json",transparencyEvidence:"contracts/transparency-evidence.v1.json",version:"contracts/version.v1.json",studioBlockerHandoff:"contracts/workspace-intelligence/studio-blocker-handoff.v1.json",workspaceRegistry:"contracts/workspace-registry.v1.json",workspaceRunLast:"contracts/workspace-run-last.v1.json",workspaceShareBundle:"contracts/workspace-share-bundle.v1.json",autopilotRelease:"contracts/autopilot-release.v1.json",workspaceList:"contracts/workspace-list.v1.json",workspaceSync:"contracts/workspace-sync.v1.json",compatibilityMatrix:"contracts/compatibility-matrix.v1.json",mcpDesign:"contracts/workspace-intelligence/mcp-design.v1.json",agentHooks:"contracts/workspace-intelligence/agent-hooks.v1.json",projectArchive:"contracts/project-archive.v1.json",workspaceSnapshot:"contracts/workspace-snapshot.v1.json",workspaceSnapshotV2:"contracts/workspace-snapshot.v2.json",infraPlan:"contracts/infra-plan.v1.json",privateProductManifest:"contracts/private-product-manifest.v1.json",productFactoryPlan:"contracts/product-factory-plan.v1.json",workspaceModelCache:"contracts/workspace-model-cache.v1.json",workspaceWatchEvent:"contracts/workspace-watch-event.v1.json",doctorProjectScan:"contracts/doctor-project-scan.v2.json",doctorWorkspaceCache:"contracts/doctor-workspace-cache.v2.json"};return Object.fromEntries(Object.entries(t).map(([r,o])=>{let n=e[r];return [r,{schemaVersion:o,contractPath:n,publication:n?r==="runtimeCommandSurface"||r==="cliRuntimeCommandInventory"||r.endsWith("Capabilities")||r.endsWith("Snapshot")||r==="extensionCliCompatibility"||r==="moduleLayout"||r==="moduleSupport"?"capability-contract":"json-schema":"embedded-type",...r==="workspaceIntelligenceArtifacts"?{artifacts:Object.fromEntries(Object.keys(p).map(a=>[a,{path:p[a],schemaVersion:q[a],contractPath:r$2[a]}]))}:{}}]}))}var us="rapidkit-command-capabilities-v1",yd="rapidkit-version-v1";var yg=["catalog","pulse","nova","orbit","atlas","vertex","summit","beacon","ledger","flux","nexus","apex","harbor","forge","spark","portal","studio","canvas","quantum","vault","zenith","compass","vector","catalyst","saas","commerce","radar","stellar","prism","cedar","momentum","signal","cipher","lumen","trail","ridge"],kg={"fastapi.standard":"api","fastapi.ddd":"api","nestjs.standard":"api","springboot.standard":"service","gofiber.standard":"api","gogin.standard":"api","dotnet.webapi.clean":"api"},vg={nextjs:"web",remix:"app","vite-react":"web","vite-vue":"web","vite-svelte":"web","vite-solid":"web","vite-vanilla":"app",nuxt:"app",angular:"app",astro:"site",sveltekit:"app"},Pg={tauri:"desktop",electron:"desktop","vscode-extension":"extension",laravel:"api"};function bg(t){return t[Math.floor(Math.random()*t.length)]}function ms(t){let e=bg(yg),r=l$5(t);if(r){let i=vg[r.id]??"app";return `${e}-${i}`}let o=r$4(t);if(o)return `${e}-${Pg[o.id]??"app"}`;let n=a$3(t),a=n?kg[n.id]??"service":"app";return `${e}-${a}`}async function Eg(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function Ag(t){if(!await M.pathExists(t))return [];let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(o)for(let n of await promises.readdir(o,{withFileTypes:true})){let a=b.join(o,n.name);n.isFile()?e.push(a):n.isDirectory()&&r.push(a);}}return e}async function vd(t,e){await M.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}function gt(t,e){return b.isAbsolute(e)?e:b.join(t,e)}function Rg(t,e){if(!e.trim()||b.isAbsolute(e)||/^[a-zA-Z]:[\\/]/.test(e))throw new Error(`Mirror artifact target must be a non-empty relative path: ${e}`);let r=b.resolve(t),o=b.resolve(r,e),n=b.relative(r,o);if(!n||n.startsWith("..")||b.isAbsolute(n))throw new Error(`Mirror artifact target escapes the managed artifact directory: ${e}`);return o}async function Pd(t,e){let r=b.relative(t,e),o=t;for(let a of r.split(b.sep).slice(0,-1)){o=b.join(o,a);let i=await promises.lstat(o).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)break;if(i.isSymbolicLink())throw new Error(`Mirror artifact target traverses a symbolic link: ${o}`);if(!i.isDirectory())throw new Error(`Mirror artifact target parent is not a directory: ${o}`)}let n=await promises.lstat(e).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(n?.isSymbolicLink()||n&&!n.isFile())throw new Error(`Mirror artifact target must be absent or a regular file: ${e}`)}async function xg(t,e){let r=b.resolve(t),o=b.relative(r,b.resolve(e));if(!o||o.startsWith("..")||b.isAbsolute(o))throw new Error("Managed mirror directory escapes the workspace.");let n=r;for(let a of o.split(b.sep)){n=b.join(n,a);let i=await promises.lstat(n);if(i.isSymbolicLink()||!i.isDirectory())throw new Error(`Managed mirror path must contain only real directories: ${n}`)}}function Ig(t,e){if(t.target)return t.target;if(t.source)return b.basename(t.source);if(t.url)try{let r=new URL(t.url).pathname,o=b.basename(r);if(o&&o!=="/")return o}catch{}return `${e}.artifact`}async function _g(t){let e=t$1(t,"trusted-sources.lock").find(o=>existsSync(o)),r=new Set(["localhost","127.0.0.1"]);if(!e)return r;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(a=>a.trim()).filter(a=>a.length>0&&!a.startsWith("#"));for(let a of n)r.add(a.toLowerCase());}catch{}return r}async function Og(t,e,r){await M.ensureDir(b.dirname(e)),await new Promise((o,n)=>{let i=(t.startsWith("https://")?Ad:Ed).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let l=createWriteStream(e);c.pipe(l),l.on("finish",()=>{l.close(),o();}),l.on("error",p=>{n(p);});});i.setTimeout(r,()=>{i.destroy(new Error(`Request timeout after ${r}ms`));}),i.on("error",c=>{n(c);});});}async function Ng(t,e,r,o,n){let a=new URL(t),i=JSON.stringify(e),c=a.protocol==="https:"?Ad:Ed;await new Promise((l,p)=>{let f=c.request({method:"POST",hostname:a.hostname,port:a.port||(a.protocol==="https:"?443:80),path:`${a.pathname}${a.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(i),...o?{Authorization:`Bearer ${o}`}:{},...n||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){p(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),l();});f.setTimeout(r,()=>{f.destroy(new Error(`Request timeout after ${r}ms`));}),f.on("error",u=>{p(u);}),f.write(i),f.end();});}function bd(t){return new Promise(e=>setTimeout(e,t))}async function $g(t,e,r,o){let n=gt(t,e||".workspai/reports/evidence-export-dead-letter.ndjson");return await M.ensureDir(b.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:o,payload:r})}
+`,"utf-8"),n}function Tg(t,e){if(!e?.enabled)return {headers:{}};let r=process.env[e.hmacKeyEnv];if(!r)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let o=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",a=createHmac(o,r).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:a,"x-rapidkit-evidence-signature-alg":o}}}async function Mg(t,e,r){let o=(r.algorithm||"sha256").toLowerCase(),n=gt(t,r.publicKeyPath);if(!await M.pathExists(n))return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Public key not found: ${n}`};try{let a=await promises.readFile(n,"utf-8"),i=await promises.readFile(e),c=createVerify(o);c.update(i),c.end();let l=Buffer.from(r.signature,"base64"),p=c.verify(a,l),f=createHash("sha256").update(a).digest("hex");return {verified:p,algorithm:o,publicKeyPath:n,publicKeyFingerprint:f,signature:r.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(a){return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Attestation verification error: ${a.message}`}}}async function Wg(t,e,r,o){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};let a=r.signaturePath?gt(t,r.signaturePath):null;if(!a||!await M.pathExists(a))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:a};let i=["verify-blob",e,"--signature",a],c=r.certificatePath?gt(t,r.certificatePath):null;c&&i.push("--certificate",c);let l=r.bundlePath?gt(t,r.bundlePath):null;l&&i.push("--bundle",l);let p=r.keyPath?gt(t,r.keyPath):null;p&&i.push("--key",p),r.identity&&i.push("--certificate-identity",r.identity),r.issuer&&i.push("--certificate-oidc-issuer",r.issuer),r.rekorUrl&&i.push("--rekor-url",r.rekorUrl),o.requireTransparencyLog||i.push("--insecure-ignore-tlog");try{let f=await execa("cosign",i,{reject:false});return f.exitCode===0?{verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${f.stderr||f.stdout||"unknown error"}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}catch(f){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${f.message}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}}async function Dg(t,e){let r=e.algorithm||"sha256",o=gt(t,e.policyPath),n=gt(t,e.signaturePath),a=gt(t,e.publicKeyPath);if(!await M.pathExists(o))return {verified:false,message:`Governance policy bundle not found: ${o}`,policies:null};if(!await M.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await M.pathExists(a))return {verified:false,message:`Governance policy public key not found: ${a}`,policies:null};try{let i=await promises.readFile(o,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),l=await promises.readFile(a,"utf-8"),p=createVerify(r);return p.update(i),p.end(),p.verify(l,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(i).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(i){return {verified:false,message:`Governance policy bundle verification error: ${i.message}`,policies:null}}}async function gs(t$2,e){let r=[],o={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=t$1(t$2,"mirror-config.json").find(C=>existsSync(C))??q$1(t$2,"mirror-config.json"),a=q$1(t$2,"mirror.lock"),i=q$1(t$2,"mirror","artifacts"),c=q$1(t$2,"reports"),l=await _g(t$2);if(!await M.pathExists(n))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .workspai/mirror-config.json not found."}),{checks:r,details:o};let p={};try{p=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return r.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:r,details:o}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||p.mode==="offline-only"))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:r,details:o};await M.ensureDir(i);try{await xg(t$2,i);}catch(C){return r.push({id:"mirror.root.safety",status:"failed",message:C instanceof Error?C.message:String(C)}),{checks:r,details:o}}let u=Math.max(0,p.prefetch?.retries??2),g=Math.max(0,p.prefetch?.backoffMs??250),j=Math.max(1e3,p.prefetch?.timeoutMs??15e3),y=p.security?.requireAttestation===true,S=p.security?.requireSigstore===true,E=p.security?.requireTransparencyLog===true,R=p.security?.requireSignedGovernance===true,d=p.security?.evidenceExport,m=(process.env.RAPIDKIT_ENV||p.security?.governance?.environment||"dev").toLowerCase(),w=p.security?.governance?.policies||{};if(p.security?.governanceBundle){let C=await Dg(t$2,p.security.governanceBundle);if(r.push({id:"governance.bundle.verify",status:C.verified?"passed":"failed",message:C.message}),C.verified&&C.policies)w=C.policies,o.governanceBundleVerified=true;else if(R)return {checks:r,details:o}}let k=w[m],h=E||k?.requireTransparencyLog===true,v=[],I=Array.isArray(p.artifacts)?p.artifacts:[],x=[];for(let C=0;C<I.length;C+=1){let _=I[C],N=_.id||`artifact-${C+1}`,V=_.source?gt(t$2,_.source):null,D=Ig(_,N),q;try{q=Rg(i,D),await Pd(i,q);}catch(te){r.push({id:`mirror.target.${N}`,status:"failed",message:te instanceof Error?te.message:String(te)});continue}let J=false,ae=q,pe=false,se=async()=>{pe&&await promises.rm(ae,{force:true}).catch(()=>{});},Ue={sourceType:"path",source:V||_.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(V&&await M.pathExists(V))await M.ensureDir(b.dirname(q)),ae=`${q}.${process.pid}.${randomUUID()}.tmp`,pe=true,await promises.copyFile(V,ae),o.syncedArtifacts+=1,J=true,Ue={sourceType:"path",source:V,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},r.push({id:`mirror.sync.${N}`,status:"passed",message:`Mirrored artifact ${N} from source path.`});else if(_.url){let te="";try{te=new URL(_.url).hostname.toLowerCase();}catch{r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Invalid URL for ${N}: ${_.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||l.has(te))){r.push({id:`mirror.prefetch.trust.${N}`,status:"failed",message:`Untrusted mirror host for ${N}: ${te}. Add host to .workspai/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await M.pathExists(q)?(J=true,Ue={sourceType:"url",source:_.url,host:te,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},r.push({id:`mirror.prefetch.${N}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${N}.`})):r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${N} without an existing mirrored copy.`}),!J))continue;if(!J){await M.ensureDir(b.dirname(q)),ae=`${q}.${process.pid}.${randomUUID()}.tmp`,pe=true;let Y=null,O=0;for(let K=1;K<=u+1;K+=1){O=K;try{await promises.rm(ae,{force:true}).catch(()=>{}),await Og(_.url,ae,j),o.syncedArtifacts+=1,J=true,Ue={sourceType:"url",source:_.url,host:te,fetchedAt:new Date().toISOString(),attempts:O,trusted:true},r.push({id:`mirror.prefetch.${N}`,status:"passed",message:O>1?`Prefetched artifact ${N} from ${te} after ${O} attempts.`:`Prefetched artifact ${N} from ${te}.`});break}catch(H){if(Y=H,K<=u){await bd(g*K);continue}}}if(!J){await se(),r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Failed to prefetch ${N} after ${u+1} attempt(s): ${Y?.message||"unknown error"}`});continue}}if(!J){r.push({id:`mirror.prefetch.${N}`,status:"failed",message:`Failed to prefetch ${N}.`});continue}}if(!J){_.required||e.offlineMode?r.push({id:`mirror.sync.${N}`,status:"failed",message:`Mirror source missing for ${N}${V?`: ${V}`:""}`}):r.push({id:`mirror.sync.${N}`,status:"skipped",message:`Mirror source not found for optional artifact ${N}.`});continue}let ze=await Eg(ae);if(_.sha256&&_.sha256.toLowerCase()!==ze.toLowerCase()){r.push({id:`mirror.verify.${N}`,status:"failed",message:`Checksum mismatch for ${N}.`}),await se();continue}o.verifiedArtifacts+=1,r.push({id:`mirror.verify.${N}`,status:"passed",message:`Checksum verified for ${N}.`});let be=_.attestation?await Mg(t$2,ae,_.attestation):null;if(_.attestation){if(r.push({id:`mirror.attest.${N}`,status:be?.verified?"passed":"failed",message:be?.message||"Attestation verification failed."}),!be?.verified){await se();continue}}else if(y){r.push({id:`mirror.attest.${N}`,status:"failed",message:`Attestation is required but missing for ${N}.`}),await se();continue}else r.push({id:`mirror.attest.${N}`,status:"skipped",message:`No attestation provided for ${N}.`});let L=_.attestation?.sigstore,G=L?await Wg(t$2,ae,L,{requireTransparencyLog:h}):null;if(L){if(r.push({id:`mirror.sigstore.${N}`,status:G?.verified?"passed":"failed",message:G?.message||"Sigstore verification failed."}),v.push({artifactId:N,verified:!!G?.verified,tlogVerified:!!G?.tlogVerified,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,timestamp:new Date().toISOString(),environment:m}),!G?.verified){await se();continue}}else if(S){r.push({id:`mirror.sigstore.${N}`,status:"failed",message:`Sigstore attestation is required but missing for ${N}.`}),await se();continue}else r.push({id:`mirror.sigstore.${N}`,status:"skipped",message:`No Sigstore attestation provided for ${N}.`});if(L&&G?.verified&&k){let te=k.allowedIdentities||[];if(te.length>0){let Y=!!G.identity&&te.includes(G.identity);if(r.push({id:`mirror.sigstore.policy.identity.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore identity policy passed for ${N} in ${m}.`:`Sigstore identity policy failed for ${N} in ${m}.`}),!Y){await se();continue}}let z=k.allowedIssuers||[];if(z.length>0){let Y=!!G.issuer&&z.includes(G.issuer);if(r.push({id:`mirror.sigstore.policy.issuer.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore issuer policy passed for ${N} in ${m}.`:`Sigstore issuer policy failed for ${N} in ${m}.`}),!Y){await se();continue}}let ee=k.allowedRekorUrls||[];if(ee.length>0){let Y=!!G.rekorUrl&&ee.includes(G.rekorUrl);if(r.push({id:`mirror.sigstore.policy.rekor.${N}`,status:Y?"passed":"failed",message:Y?`Sigstore Rekor policy passed for ${N} in ${m}.`:`Sigstore Rekor policy failed for ${N} in ${m}.`}),!Y){await se();continue}}}else k&&r.push({id:`mirror.sigstore.policy.${N}`,status:"skipped",message:`Sigstore governance policy configured for ${m} but no verified Sigstore attestation for ${N}.`});pe&&(await Pd(i,q),await promises.rename(ae,q),pe=false);let oe=await promises.stat(q);x.push({id:N,path:b.relative(t$2,q),sha256:ze,size:oe.size,provenance:Ue,attestation:{detached:{provided:!!_.attestation,verified:be?.verified||false,algorithm:be?.algorithm||null,publicKeyPath:be?.publicKeyPath||null,publicKeyFingerprint:be?.publicKeyFingerprint||null,signature:be?.signature||null,verifiedAt:be?.verified?new Date().toISOString():null},sigstore:{provided:!!L,verified:G?.verified||false,tlogVerified:G?.tlogVerified||false,identity:G?.identity||null,issuer:G?.issuer||null,rekorUrl:G?.rekorUrl||null,bundlePath:G?.bundlePath||null,certificatePath:G?.certificatePath||null,signaturePath:G?.signaturePath||null,verifiedAt:G?.verified?new Date().toISOString():null}}});}let P=p.retention?.keepLast;if(typeof P=="number"&&P>0){let C=new Set(x.map(N=>b.resolve(t$2,N.path))),_=(await Ag(i)).filter(N=>!C.has(b.resolve(N)));if(_.length>P){let N=await Promise.all(_.map(async D=>({filePath:D,stat:await promises.stat(D)})));N.sort((D,q)=>q.stat.mtimeMs-D.stat.mtimeMs);let V=N.slice(P);for(let D of V)await promises.unlink(D.filePath),o.rotatedFiles+=1;}}r.push({id:"mirror.rotate",status:"passed",message:o.rotatedFiles>0?`Mirror retention rotation removed ${o.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let A={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:p.mode||null,environment:m,artifacts:x};if(await promises.writeFile(a,`${JSON.stringify(A,null,2)}
+`,"utf-8"),o.lockWritten=true,r.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${b.relative(t$2,a)}.`}),o.transparencyEvidenceRecords=v.length,v.length>0){let C={schemaVersion:s$2.transparencyEvidence.schemaVersion,generatedAt:new Date().toISOString(),environment:m,records:v},_=new Date().toISOString().replace(/[:.]/g,"-"),N=b.join(c,`transparency-evidence-${_}.json`),V=b.join(c,"transparency-evidence.latest.json");if(b$r(`.workspai/reports/${b.basename(N)}`,C),b$r(t.transparencyEvidence,C),await M.ensureDir(c),await vd(N,C),await vd(V,C),o.transparencyEvidenceWritten=true,r.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${b.relative(t$2,V)}.`}),d?.enabled){let D=Math.max(1e3,d.timeoutMs??1e4);if(d.target==="file")if(!d.filePath)r.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let q=gt(t$2,d.filePath);await M.ensureDir(b.dirname(q)),await promises.appendFile(q,`${JSON.stringify(C)}
+`,"utf-8"),o.evidenceExported=true,o.evidenceExportTarget=q,r.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${q}.`});}catch(q){r.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${q.message}`});}else if(d.target==="http")if(!d.endpoint)r.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let q=Math.max(0,d.retries??0),J=Math.max(0,d.backoffMs??500),ae=Tg(C,d.signing);ae.error&&r.push({id:"sigstore.evidence.export.http",status:"failed",message:ae.error});try{let pe=d.authTokenEnv?process.env[d.authTokenEnv]:void 0,se=false,Ue=null;for(let ze=1;ze<=q+1;ze+=1)try{if(ae.error)throw new Error(ae.error);await Ng(d.endpoint,C,D,pe,ae.headers),o.evidenceExported=true,o.evidenceExportTarget=d.endpoint,r.push({id:"sigstore.evidence.export.http",status:"passed",message:ze>1?`Transparency evidence exported to HTTP endpoint ${d.endpoint} after ${ze} attempts.`:`Transparency evidence exported to HTTP endpoint ${d.endpoint}.`}),se=true;break}catch(be){Ue=be,ze<=q&&await bd(J*ze);}if(!se)throw Ue||new Error("unknown evidence export error")}catch(pe){let se=`Evidence HTTP export failed: ${pe.message}`;r.push({id:"sigstore.evidence.export.http",status:"failed",message:se});try{let Ue=await $g(t$2,d.deadLetterPath,C,se);r.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${Ue}.`});}catch(Ue){r.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${Ue.message}`});}}}if(d.failOnError&&r.some(J=>J.status==="failed"&&(J.id==="sigstore.evidence.export.file"||J.id==="sigstore.evidence.export.http")))return {checks:r,details:o}}else r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else r.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:r,details:o}}function On(t){let e=f$6(t.detection.runtime),r=x$1({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),o=[];o.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),o.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),o.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),o.push({id:"lifecycle-commands",status:r.lifecycleCommands.length>1?"pass":"warn",message:r.lifecycleCommands.length>1?`Lifecycle commands available: ${r.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:r.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=o.some(i=>i.status==="fail"),a=o.some(i=>i.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":a?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:r.lifecycleCommands,unsupportedLifecycleCommands:r.unsupportedLifecycleCommands,moduleCommands:r.moduleCommands},checks:o}}function Lg(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function Nn(t){if(t.existingProjectJson?.module_support===true){let e=Lg(t.existingProjectJson),r=e?a$3(e):void 0;return r?.owner==="core"&&r.moduleSupport===true}return  false}var Rd=[a$e,b$b];function Fg(t,e){let r=b.relative(t,e);return r===""||r.length>0&&!r.startsWith("..")&&!b.isAbsolute(r)}async function lt(t){let e=await M__default.realpath(t);for(let r of Rd){let o=b.join(t,r),n=await M__default.lstat(o).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${o}`);let a=await M__default.realpath(o);if(!Fg(e,a))throw new Error(`Project metadata directory resolves outside the project: ${o}`)}}async function xd(t){let e=b.basename(t);return Rd.includes(e)?(await M__default.lstat(t)).isSymbolicLink():false}function Id(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function Vg(t){let e=t.trim();if(!e)return "imported-project";let r=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),o=r[r.length-1]||e,n=o.split(":"),a=(n[n.length-1]||o).replace(/\.git$/i,"");return Id(a)||"imported-project"}function Mt(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function Jg(t){return Mt(t)?"git-url":"local-folder"}async function Kg(t,e){let r=Id(e)||"imported-project",o=0;for(;;){let n=o===0?r:o===1?`${r}-imported`:`${r}-imported-${o}`,a=b.join(t,n);if(!await M__default.pathExists(a))return a;o+=1;}}function Hg(t,e){let r=b.resolve(t),o=b.resolve(e),n=b.relative(r,o);return n===""||n.length>0&&!n.startsWith("..")&&!b.isAbsolute(n)}function Bg(t,e){if(Hg(t,e))throw new Error("Import source must be outside the current workspace root.")}function Ug(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function qg(t){let e=b.basename(t);return !(await xd(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||Ug(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function zg(t){await lt(t);for(let e of u(t,"project.json"))if(await M__default.pathExists(e))try{return await M__default.readJson(e)}catch{return null}return null}async function Yg(t){await lt(t.projectPath);let e=new Date().toISOString(),r=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),o=b$d({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:r}),n=o.contractRelativePath,a=v$1(t.projectPath,"project.json"),i=v$1(t.projectPath,"import.json"),c=v$1(t.projectPath,"import-readiness.json"),l=Nn({existingProjectJson:t.existingProjectJson}),p=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],f=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},u={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:b.basename(t.projectPath),kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:l,modules:p,contracts:f,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:o.relativePath,is_external:o.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},g={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:b.basename(t.projectPath)},project:{name:u.name,slug:u.slug,relative_path:n,kind:t.projectKind,category:a$g(t.projectKind),module_support:l},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,category:a$g(t.projectKind),confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:l,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},j=On({projectName:String(u.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:l,projectPath:t.projectPath,generatedAt:new Date(e)});return await M__default.ensureDir(b.dirname(a)),await M__default.writeJson(a,u,{spaces:2}),await M__default.writeJson(i,g,{spaces:2}),await M__default.writeJson(c,j,{spaces:2}),{projectJsonPath:a,importJsonPath:i,importReadinessPath:c,moduleSupport:l}}async function Xg(t,e){let r={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,relationship:"imported",importedAt:new Date().toISOString()};await b$f(t,[r]);}async function Qg(t){await M__default.pathExists(t)&&(await lt(t),await M__default.remove(t));}async function Zg(t,e){await Qg(e),await c$4(t,[e]);}async function _d(t){let e=b.resolve(t.workspacePath),r=t.source.trim(),o=t.sourceType??Jg(r),n=t.name??(o==="git-url"?Vg(r):b.basename(r)),a=await Kg(e,n),i=false;try{if(o==="local-folder"){let m=b.resolve(r),w=await M__default.stat(m).catch(()=>null);if(!w||!w.isDirectory())throw new Error("Import source is not a directory.");if(await lt(m),k$1(m))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");Bg(e,m),i=true,await M__default.copy(m,a,{overwrite:false,errorOnExist:true,filter:qg});}else i=true,await execa("git",["clone","--depth","1","--",r,a],{timeout:12e4,env:a$f()});await lt(a);let c=await zg(a),l=m$3(a,c),p=await b$c(a,c,{runtime:l.runtime,framework:l.key}),[f,u]=await Promise.all([q$3(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):p$6(e)]),g=o$3({profile:f,runtime:l.runtime,subjectLabel:b.basename(a),mode:u}),j=n$2({profile:f,runtimes:await r$1(e,{additionalRuntimes:[l.runtime]}),mode:u}),y=g.ok?j:g;if(!y.ok&&u==="strict")throw new Error(y.message);let S=await Yg({workspacePath:e,projectPath:a,sourceType:o,detection:l,existingProjectJson:c,projectKind:p,profileCompatibility:y}),E=b$d({workspacePath:e,projectPath:a,projectName:b.basename(a)}),R={ingestionPlan:Ut({action:"import-project",resourceKind:"project",sourceKind:o,mode:o==="git-url"?"clone":"copy",ownership:o==="git-url"?"materialized":"workspace-owned",registration:"project",source:o==="git-url"?r:b.resolve(r),targetWorkspace:e,destination:a,projectGrounding:t.projectGrounding??"managed"}),name:b.basename(a),path:a,relativePath:E.contractRelativePath,stack:l.importStack,runtime:l.runtime,framework:l.key,frameworkDisplayName:l.displayName,supportTier:l.supportTier,moduleSupport:S.moduleSupport,confidence:l.confidence,source:o,projectJsonPath:S.projectJsonPath,importJsonPath:S.importJsonPath,importReadinessPath:S.importReadinessPath,profileCompatibility:y};await Xg(e,R);let{syncWorkspaceContract:d}=await import('./workspace-contract-PMHUUKFM.js');return await d({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:R.path,projectName:R.name,relationship:"imported",mode:t.projectGrounding??"managed"}),R}catch(c){if(i)try{await Zg(e,a);let{syncWorkspaceContract:l}=await import('./workspace-contract-PMHUUKFM.js');await l({workspacePath:e,strict:true});}catch(l){let p=c instanceof Error?c.message:String(c),f=l instanceof Error?l.message:String(l);throw new Error(`Import failed: ${p}. Rollback also failed: ${f}`)}throw c}}function ef(t){return {schemaVersion:In,sourceMode:"linked",sourceCodeModified:false,projectMetadataFiles:[".workspai/project.json",".workspai/adopt.json",".workspai/adopt-readiness.json",f$1,...t==="off"?[]:[h$1,g$3,b$a,i$1]],repositoryControlFiles:[{path:".gitignore",action:"reconcile",condition:"machine-local workspace binding and project-grounding portability rules"},...t==="managed"?[{path:"AGENTS.md",action:"reconcile",condition:"managed grounding is enabled and the path is a regular file; authored deletions and symbolic links are preserved"},{path:".agents/skills/workspai-*/SKILL.md",action:"reconcile",condition:"managed provider-neutral Skill discovery is enabled; authored collisions and unsafe symbolic links are preserved"},...g$4.map(e=>({path:e,action:"reconcile",condition:"managed provider adapter is enabled; authored content, deletions, symbolic links, and unsafe parent paths are preserved"}))]:[]],workspaceOperations:["register-project","sync-contract","rebuild-model","rebuild-graph","sync-agent-grounding"]}}function tf(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function rf(t,e){return b.resolve(t)===b.resolve(e)}async function of(t){await lt(t);for(let e of u(t,"project.json")){if(!await M__default.pathExists(e))continue;let r;try{r=JSON.parse((await M__default.readFile(e)).toString("utf8"));}catch(o){throw new Error(`Authoritative project metadata is malformed: ${e}: ${o instanceof Error?o.message:String(o)}`)}if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return r}return null}async function Od(t,e){let r=b.relative(t,e);if(r.startsWith("..")||b.isAbsolute(r))return  true;let o=r.split(b.sep).slice(0,-1),n=t;for(let a of o){n=b.join(n,a);let i=await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)return  false;if(i.isSymbolicLink()||!i.isDirectory())return  true}return  false}async function nf(t){let e=b.join(t,".amazonq"),r=await M__default.lstat(e).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(!r)return [e,b.join(e,"rules")];if(r.isSymbolicLink()||!r.isDirectory())return [];let o=b.join(e,"rules");return await M__default.lstat(o).catch(a=>{if(a.code==="ENOENT")return null;throw a})?[]:[o]}async function Nd(t,e){let r=[b.join(e,"AGENTS.md"),...g$4.map(n=>b.join(e,n))],o=[];for(let n of r){if(!(await M__default.lstat(n).catch(c=>{if(c.code==="ENOENT")return null;throw c}))?.isSymbolicLink())continue;let i=await a$d(e,n);i&&o.push(i);}return [v$1(e,"project.json"),v$1(e,"adopt.json"),v$1(e,"adopt-readiness.json"),b.join(e,f$1),b.join(e,g$3),b.join(e,h$1),b.join(e,b$a),...r,...o,b.join(e,".gitignore"),q$1(t,"imported-projects.json")].filter((n,a,i)=>i.indexOf(n)===a)}async function fs(t,e){let r=b.resolve(t),o=b.resolve(e);await lt(o);let n=await Nd(r,o);return {workspacePath:r,projectPath:o,files:await Promise.all(n.map(async a=>{if(a.startsWith(`${o}${b.sep}`)&&await Od(o,a))return {path:a,contents:null,preserve:"unsafe-parent"};let i=await M__default.lstat(a).catch(c=>{if(c.code==="ENOENT")return null;throw c});return i?.isSymbolicLink()?{path:a,contents:null,preserve:"symbolic-link"}:{path:a,contents:i?.isFile()?await M__default.readFile(a):null}})),createdAdapterDirectories:await nf(o)}}async function $d(t,e,r){let o=(await Nd(e,r)).map(a=>b.resolve(a)),n=new Set([".amazonq",".amazonq/rules"].map(a=>b.resolve(r,a)));if(t.workspacePath!==b.resolve(e)||t.projectPath!==b.resolve(r)||t.files.length!==o.length||t.files.some((a,i)=>b.resolve(a.path)!==o[i])||t.createdAdapterDirectories.some(a=>!n.has(b.resolve(a)))||new Set(t.createdAdapterDirectories.map(a=>b.resolve(a))).size!==t.createdAdapterDirectories.length)throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function af(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],r=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,category:a$g(t.projectKind),project_type:a$g(t.projectKind),runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,framework:t.detection.key,kit:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:!t.refreshManagedDetection&&typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:r,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,...t.isExternal?{}:{discovered_relative_path:t.discoveredRelativePath},is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,runtime_candidates:t.runtimeCandidates,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function sf(t,e,r){await lt(e),await $d(r,t,e);let o=[];for(let n of r.files)try{if(n.preserve==="symbolic-link")continue;n.contents===null?await M__default.remove(n.path):(await M__default.ensureDir(b.dirname(n.path)),await M__default.writeFile(n.path,n.contents));}catch(a){o.push(a);}for(let n of [...r.createdAdapterDirectories].reverse())try{if(await Od(e,n))continue;await M__default.rmdir(n);}catch(a){let i=a.code;i!=="ENOENT"&&i!=="ENOTEMPTY"&&o.push(a);}if(o.length>0)throw new AggregateError(o,"Failed to restore adopt rollback snapshot.")}async function hs(t$1){let e=b.resolve(t$1.workspacePath),r=b.resolve(t$1.source),o=await M__default.stat(r).catch(()=>null);if(!o||!o.isDirectory())throw new Error("Adopt source is not a directory.");if(await lt(r),rf(e,r))throw new Error("Adopt source cannot be the workspace root itself.");if(k$1(r))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");let n=t$1.rollbackSnapshot??await fs(e,r);await $d(n,e,r);let a=await of(r),i=j$5(a),c=m$3(r,i?null:a),l=l$1(r),p=[c.runtime,...l.filter(A=>A!==c.runtime)].filter((A,C,_)=>A!=="unknown"&&_.indexOf(A)===C);p.length===0&&p.push("unknown");let f=await b$c(r,i?{}:a,{runtime:c.runtime,framework:c.key}),u=tf(t$1.name||(typeof a?.name=="string"?a.name:"")||b.basename(r))||"adopted-project",g=b$d({workspacePath:e,projectPath:r,projectName:u}),j=(t$1.now??new Date).toISOString(),y=v$1(r,"project.json"),S=v$1(r,"adopt.json"),E=v$1(r,"adopt-readiness.json"),R=Nn({existingProjectJson:a}),[d,m]=await Promise.all([q$3(e),t$1.profilePolicyMode?Promise.resolve(t$1.profilePolicyMode):p$6(e)]),w=o$3({profile:d,runtime:c.runtime,subjectLabel:u,mode:m}),k=n$2({profile:d,runtimes:await r$1(e,{additionalRuntimes:p,excludeProjectPath:r}),mode:m}),h=w.ok?k:w;if(!h.ok&&m==="strict")throw new Error(h.message);let v=af({projectName:u,contractRelativePath:g.contractRelativePath,isExternal:g.isExternal,discoveredRelativePath:g.relativePath,detection:c,runtimeCandidates:p,existingProjectJson:a,refreshManagedDetection:i,projectKind:f,moduleSupport:R,adoptedAt:j}),I=await b$e(e),x={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:j,managed_by:"workspai",mode:"linked",workspace:{name:I,contract:t.workspaceContract},project:{name:u,relative_path:g.contractRelativePath,...g.isExternal?{}:{discovered_relative_path:g.relativePath},is_external:g.isExternal,kind:f,category:a$g(f),module_support:R},detection:{framework:c.key,framework_display_name:c.displayName,runtime:c.runtime,runtime_candidates:p,kind:f,category:a$g(f),confidence:c.confidence,support_tier:c.supportTier,import_stack:c.importStack,source:c.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:R,workspace_contract:"linked-project",profile_compatibility:{ok:h.ok,profile:h.profile,runtimes:h.runtimes,message:h.message,recommended_profile:h.recommendedProfile,recommended_command:h.recommendedCommand}}},P=On({projectName:u,relativePath:g.contractRelativePath,projectKind:f,source:"adopted-local",detection:c,moduleSupport:R,projectPath:r,generatedAt:new Date(j)});if(t$1.dryRun!==true)try{await lt(r),await M__default.ensureDir(b.dirname(y)),await M__default.writeJson(y,v,{spaces:2}),await M__default.writeJson(S,x,{spaces:2}),await M__default.writeJson(E,P,{spaces:2});let A={name:u,path:r,relativePath:g.contractRelativePath,relationship:"adopted",stack:c.importStack,runtime:c.runtime,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:R,confidence:c.confidence,source:"adopted-local",importedAt:j};await b$f(e,[A]);let{syncWorkspaceContract:C}=await import('./workspace-contract-PMHUUKFM.js');await C({workspacePath:e,strict:true}),await k$3({workspacePath:e,projectPath:r,projectName:u,relationship:"adopted",mode:t$1.projectGrounding??"managed",now:new Date(j)});}catch(A){try{await sf(e,r,n);let{syncWorkspaceContract:C}=await import('./workspace-contract-PMHUUKFM.js');await C({workspacePath:e,strict:true});}catch(C){throw new AggregateError([A,C],`Adopt failed and rollback was incomplete: ${A instanceof Error?A.message:String(A)}`)}throw A}return {ingestionPlan:Ut({action:"adopt-project",resourceKind:"project",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"project",source:r,targetWorkspace:e,destination:r,projectGrounding:t$1.projectGrounding??"managed"}),name:u,path:r,relativePath:g.relativePath,contractRelativePath:g.contractRelativePath,isExternal:g.isExternal,relationship:"adopted",stack:c.importStack,runtime:c.runtime,runtimeCandidates:p,framework:c.key,frameworkDisplayName:c.displayName,supportTier:c.supportTier,moduleSupport:R,confidence:c.confidence,projectJsonPath:y,adoptJsonPath:S,adoptReadinessPath:E,profileCompatibility:h,effects:ef(t$1.projectGrounding??"managed"),wroteFiles:t$1.dryRun!==true}}async function cf(t){for(let e of [a$e,b$b]){let r=b.join(t,e),o=await M__default.lstat(r).catch(()=>null);if(o){if(o.isSymbolicLink())return `${e}/ (symbolic link)`;if(!o.isDirectory())return `${e} (not a directory)`;if(!k$1(t))return `${e}/ (partial workspace metadata without root marker)`}}return null}async function Mn(t,e={}){let r=b.resolve(t),o=await M__default.lstat(r).catch(()=>null);if(!o)return {status:"not-clean",conflicts:["path does not exist"]};if(o.isSymbolicLink())return {status:"not-clean",conflicts:["path is a symbolic link"]};if(!o.isDirectory())return {status:"not-clean",conflicts:["path is not a directory"]};if(k$1(r))return {status:"valid-workspace"};let n=await cf(r);if(n)return {status:"not-clean",conflicts:[n]};let a=await M__default.readdir(r,{withFileTypes:true});if(a.length===0)return {status:"eligible",reason:"empty"};let i=e.containedProjectPath?b.resolve(e.containedProjectPath):null;if(i!==null&&b.dirname(i)===r&&a.length===1){let[l]=a;if(l.name===b.basename(i)&&l.isDirectory()&&!l.isSymbolicLink())return {status:"eligible",reason:"single-project-container"}}return {status:"not-clean",conflicts:a.map(l=>l.isDirectory()?`${l.name}/`:l.isSymbolicLink()?`${l.name} (symbolic link)`:l.name)}}function ys(t){let e=b.resolve(t),r=b.parse(e).root;return e!==r}function ks(t,e){let r=e.conflicts.slice(0,5).join(", "),o=e.conflicts.length>5?` (+${e.conflicts.length-5} more)`:"";return `Workspace path is not a valid Workspai workspace and is not clean enough to bootstrap: ${t}. Conflicts: ${r}${o}`}async function Td(t){let e=b.resolve(t.sourcePath),r=b.dirname(e),o=await Mn(r,{containedProjectPath:e});return {parentEligible:ys(r)&&(o.status==="eligible"||o.status==="valid-workspace"),parentAssessment:o}}async function Md(t,e={}){let r=b.resolve(t),o=await Mn(r);return o.status==="valid-workspace"?{ok:true,result:{workspacePath:r,resolution:"explicit",usedDefaultWorkspace:false,willCreateDefaultWorkspace:false,willBootstrapWorkspace:false,bootstrapTargetPath:null}}:o.status==="eligible"?{ok:true,result:{workspacePath:r,resolution:"explicit-bootstrap",usedDefaultWorkspace:false,willCreateDefaultWorkspace:false,willBootstrapWorkspace:e.dryRun!==true,bootstrapTargetPath:r}}:{ok:false,code:"workspace.adopt.target-not-clean",message:ks(r,o)}}async function Wd(t){let e=b.resolve(t.sourcePath),r=b.dirname(e),o=await Mn(r,{containedProjectPath:e}),n=t.outsideWorkspaceMode??"managed";return n==="managed"?{ok:true,result:{workspacePath:p$2(),resolution:"default-auto",usedDefaultWorkspace:true,willCreateDefaultWorkspace:t.dryRun!==true,willBootstrapWorkspace:false,bootstrapTargetPath:null}}:n==="parent"?ys(r)?o.status==="valid-workspace"?{ok:true,result:{workspacePath:r,resolution:"nearest",usedDefaultWorkspace:false,willCreateDefaultWorkspace:false,willBootstrapWorkspace:false,bootstrapTargetPath:null}}:o.status==="eligible"?{ok:true,result:{workspacePath:r,resolution:"parent-bootstrap",usedDefaultWorkspace:false,willCreateDefaultWorkspace:false,willBootstrapWorkspace:t.dryRun!==true,bootstrapTargetPath:r}}:{ok:false,code:"workspace.adopt.parent-not-clean",message:ks(r,o)}:{ok:false,code:"workspace.adopt.parent-not-eligible",message:`Parent folder cannot be turned into a workspace: ${r}`}:{ok:false,code:"workspace.adopt.mode-invalid",message:`Unsupported adopt workspace mode: ${String(n)}`}}function Dd(){return [{name:"Link it to the managed default workspace",value:"managed"},{name:"Turn the parent folder into a workspace (recommended)",value:"parent"}]}function Ld(){return 1}async function lf(t){let e=await M__default.lstat(t).catch(()=>null);if(!e||!e.isDirectory()||e.isSymbolicLink())throw new Error(`Workspace path must be a real directory, not a symbolic link: ${t}`);for(let r of [".workspai",".rapidkit"]){let o=b.join(t,r),n=await M__default.lstat(o).catch(()=>null);if(n?.isSymbolicLink())throw new Error(`Workspace metadata directory must not be a symlink: ${o}`);if(n&&!n.isDirectory())throw new Error(`Workspace metadata path must be a directory: ${o}`)}}async function pf(t){let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(!o)continue;let n=await M__default.readdir(o,{withFileTypes:true}).catch(()=>[]);for(let a of n){if(a.isSymbolicLink())continue;let i=b.join(o,a.name);if(a.isDirectory()){if([".git","node_modules",".venv","dist","build","target"].includes(a.name)||a$h(a.name))continue;r.push(i);continue}a.isFile()&&a.name===e$7&&(await M__default.remove(i),e.push(b.relative(t,i).replace(/\\/g,"/")));}}return e.sort()}async function Gd(t,e){if(await b$g(t,await b$e(t)),!(await g$5(t,true)).workspaceFound)throw new Error(`Workspace registry reconciliation failed: ${t}`);let o=await a$m(t,{silent:true,projectGrounding:e});return {writtenFiles:o.writtenFiles,warnings:o.warnings}}async function vs(t){let e=b.resolve(t.workspacePath);await lf(e);let r=Ut({action:"connect-workspace",resourceKind:"workspace",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"workspace",source:e,destination:e,projectGrounding:t.projectGrounding??"managed"});if(!k$1(e))throw new Error(`Workspace path is not a valid Workspai workspace: ${e}`);if(t.dryRun)return Wn(r,{status:"preview",workspacePath:e,registered:false,verified:true});let o=await c$5(e);try{let n=await Gd(e,t.projectGrounding??"managed");return Wn(r,{workspacePath:e,writtenFiles:n.writtenFiles,warnings:n.warnings,registered:true,verified:true})}catch(n){throw await d$6(e,o).catch(()=>{}),n}}async function Ps(t){if(t.dryRun){let o=await p$4({archivePathOrUrl:t.archivePathOrUrl,outputPath:t.outputPath,dryRun:true,strict:t.strict,safety:t.safety}),n=b.resolve(o.outputPath),a=Fd(t,n);return Wn(a,{status:"preview",workspacePath:n,registered:false,verified:true,warnings:(o.manifest?.externalProjects??[]).map(i=>`External project "${i.name}" must be relinked after import.`)})}let e=t.outputPath?b.resolve(t.outputPath):void 0;if(e&&await M__default.pathExists(e))throw new Error(`Workspace import destination already exists: ${e}. Choose a new --output path.`);let r;try{let o=await p$4({archivePathOrUrl:t.archivePathOrUrl,outputPath:e,strict:t.strict,safety:t.safety});r=b.resolve(o.outputPath);let n=Fd(t,r);if(!k$1(r))throw new Error("Imported archive did not materialize a valid Workspai workspace.");let a=await pf(r);o.manifest?.portableContract&&await M__default.outputJson(b.join(r,".workspai","workspace.contract.json"),o.manifest.portableContract,{spaces:2});let i=await Gd(r,t.projectGrounding??"managed");return Wn(n,{workspacePath:r,writtenFiles:[...o.files.map(c=>c.path),...i.writtenFiles].filter((c,l,p)=>p.indexOf(c)===l),warnings:[...i.warnings,...(o.manifest?.externalProjects??[]).map(c=>`External project "${c.name}" must be relinked after import.`),...a.length>0?[`Rebuilt ${a.length} machine-local project workspace link(s).`]:[]],registered:true,verified:true})}catch(o){throw r&&(await e$5(r).catch(()=>{}),await M__default.remove(r).catch(()=>{})),o}}function Fd(t,e){return Ut({action:"import-workspace",resourceKind:"workspace",sourceKind:"archive",mode:"hydrate",ownership:"workspace-owned",registration:"workspace",source:t.archivePathOrUrl,destination:e,projectGrounding:t.projectGrounding??"managed"})}function Wn(t,e){let r={schemaVersion:xn,status:"passed",plan:t,writtenFiles:[],warnings:[],...e};return a$4(r,wd,"Workspace ingestion result"),r}function Vd(t){let e={name:"Add existing software (local project, Git repository, or workspace)",value:"existing"};return t?[{name:"Create a project",value:"project"},e,{name:"Create another workspace (outside the current workspace)\u2026",value:"workspace"}]:[{name:"Create a workspace",value:"workspace"},{name:"Create a project",value:"project"},e]}function Jd(){return {type:"input",name:"source",message:"Local path, Git URL, or Workspai archive:",validate:t=>t.trim().length>0||"A source is required"}}function Kd(t){let e=t.trim(),r=e.startsWith("~/")?b.join(homedir(),e.slice(2)):e;if(/\.(?:workspai|rapidkit)-archive\.zip(?:[?#].*)?$/i.test(r)||!Mt(r)&&/\.zip$/i.test(r))return {kind:"workspace-archive",source:Mt(r)?r:b.resolve(r)};if(Mt(r))return {kind:"git-project",source:r};let n=b.resolve(r);return k$1(n)?{kind:"local-workspace",source:n}:{kind:"local-project",source:n}}var gf=Rn,ff=En;function js(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function hf(t=process.argv){let e=b.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function xr(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function wf(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function _e(t,e){let r=t.indexOf(e);if(r>=0&&r+1<t.length)return t[r+1];let o=t.find(n=>n.startsWith(`${e}=`));if(o)return o.slice(e.length+1)}function yf(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let r=Number(e);if(!Number.isSafeInteger(r)||r<1||r>16)throw new Error("--max-workers must be an integer between 1 and 16.");return r}function Is(t){try{return yf(t.raw)}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"cli.option.max-workers.invalid",message:r,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(s.red(`\u274C ${r}`)),process.exit(1);}}async function Hs(t,e){let r=_e(t,"--port")?.trim(),o=t[3];if(!r||!o||!/^\d+$/.test(r))return;let n=Number.parseInt(r,10);if(n<1||n>65535)return;let a=_e(t,"--output")||".",i=b.resolve(e,a,o),c=u(i,"project.json").find(p=>$.existsSync(p))??v$1(i,"project.json");if(!await M__default.pathExists(c))return;let l=await M__default.readJson(c);await M__default.writeJson(c,{...l,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function Bd(t){let e=Ae(process.cwd()),r=t.trim().toLowerCase();if(!e||!r)return  true;try{let[o,n]=await Promise.all([q$3(e),p$6(e)]),a=a$3(r),i=l$5(r),c=r$4(r),l=i?"node":c?.runtime??a?.runtime??"python",p=o$3({profile:o,runtime:l,subjectLabel:r,mode:n}),f=n$2({profile:o,runtimes:await r$1(e,{additionalRuntimes:[l]}),mode:n}),u=p.ok?f:p;if(u.ok)return  true;let g=s$1(u);if(n==="strict")return console.log(s.red(`\u274C Profile violation (strict mode): ${u.message}`)),g&&console.log(s.gray(`\u{1F4A1} ${g}`)),false;console.log(s.yellow(`\u26A0\uFE0F  Profile warning: ${u.message}`)),g&&console.log(s.gray(`\u{1F4A1} ${g}`));}catch{}return  true}function Bs(){return j$8()}function _s(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(b.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=i$4()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function kf(t){return m$7(b.join(t,".venv"))}async function vf(t,e){return await Re(t,["--version"],e)===0}async function Pf(t,e){return new Promise(r=>{let o=spawn(t,["--version"],{cwd:e,stdio:"ignore",env:_s()});o.once("error",()=>r(false)),o.once("close",n=>r(n===0));})}async function Xt(t){let e=b.join(t,"go.mod");if(await M__default.pathExists(e))return "go";let r=b.join(t,"pom.xml"),o=b.join(t,"build.gradle"),n=b.join(t,"build.gradle.kts");if(await M__default.pathExists(r)||await M__default.pathExists(o)||await M__default.pathExists(n))return "java";if((await M__default.pathExists(t)?await $.promises.readdir(t,{withFileTypes:true}):[]).some(j=>j.isFile()&&j.name.toLowerCase().endsWith(".sln")))return "dotnet";let i=b.join(t,"src");if(await M__default.pathExists(i)&&(await $.promises.readdir(i,{withFileTypes:true})).some(y=>y.isFile()&&y.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=b.join(t,"Cargo.toml");if(await M__default.pathExists(c))return "rust";let l=b.join(t,"composer.json");if(await M__default.pathExists(l))return "php";let p=b.join(t,"package.json");if(await M__default.pathExists(p))return "node";let f=b.join(t,"pyproject.toml"),u=b.join(t,"requirements.txt"),g=b.join(t,"poetry.lock");return await M__default.pathExists(f)||await M__default.pathExists(u)||await M__default.pathExists(g)?"python":null}async function bf(t,e={}){let r=e.runCommand??Re,o=b.join(t,".venv"),n=await M__default.pathExists(o);for(let a of e.pythonCandidates??Bs()){if(await r(a,a==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;n||await M__default.remove(o);}return 1}async function jf(t,e={}){let r=e.runCommand??Re,o=b.join(t,".venv"),n=m$7(o);if(await M__default.pathExists(n)){if(await r(n,["-m","pip","--version"],t)===0)return 0;await M__default.remove(o);}let a=await bf(t,e);if(a!==0)return a;n=m$7(o);let i=await r(n,["-m","pip","--version"],t);return i!==0&&await M__default.remove(o),i}async function cu(t,e={}){let r=e.runCommand??Re;for(let o of e.pythonCandidates??Bs())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Cf(t,e={}){let r=e.runCommand??Re,o=m$7(b.join(t,".venv"));if(!await M__default.pathExists(o)){let p=await cu(t,e);if(p!==0)return p}let n=process.platform==="win32"?b.join(t,".venv","Scripts","poetry.exe"):b.join(t,".venv","bin","poetry"),a=e.runCommand?await r("poetry",["--version"],t)===0:await Pf("poetry",t),i=await M__default.pathExists(n)?n:a?"poetry":null;if(!i)return 0;let c=await r(i,["config","virtualenvs.in-project","true","--local"],t);if(c!==0)return c;let l=await r(i,["env","use",o],t);return l!==0?l:0}async function Sf(t,e={}){let r=e.runCommand??Re,o=m$7(b.join(t,".venv"));if(!await M__default.pathExists(o)){let i=await cu(t,e);if(i!==0)return i}await r(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=b.join(t,"requirements.txt");if(await M__default.pathExists(n)&&await r(o,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let a=b.join(t,"pyproject.toml");return await M__default.pathExists(a)&&(await r(o,["-m","pip","install","-e","."],t)===0||await r(o,["-m","pip","install","."],t)===0)?0:1}async function Cs(t,e){return await Cf(t)!==0&&console.log(s.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await M__default.pathExists(b.join(t,".venv"))?0:(console.log(s.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await Sf(t))}async function Ss(t){let e=await Yt("init",t);if(e===0)return 0;let r=["npm","pnpm","yarn"];for(let o of r){if(!await vf(o,t))continue;if(await Re(o,["install"],t)===0)return console.log(s.green(`\u2705 Node init fallback succeeded with ${o} install`)),0}return e}function Ef(t,e){let r=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),o=_e([...e],"--port");if(o&&!/^\d+$/.test(o.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=_e([...e],"--java-version"),a=_e([...e],"--spring-boot-version"),i=_e([...e],"--springdoc-version"),c=_e([...e],"--group-id"),l=_e([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(a&&!r(a.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(i&&!r(i.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(l&&!/^[A-Za-z0-9_.-]+$/.test(l.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=_e([...e],"--target-framework"),a=_e([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(a&&!/^[A-Za-z0-9_.]+$/.test(a.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function Es(t,e={}){if(t.includes("--dry-run")||t.includes("--no-workspace")||Ws(process.cwd()))return;let r=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:n}=await import('./create-P4XJVZCL.js');await n(process.cwd(),{skipGit:r,yes:t.includes("--yes")||t.includes("-y"),userConfig:await c()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:o}=await b$1([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},...e.requireWorkspace?[]:[{name:"Create it without workspace management",value:"none"}]],default:1}]);if(o==="current"){let{registerWorkspaceAtPath:n}=await import('./create-P4XJVZCL.js');await n(process.cwd(),{skipGit:r,yes:false,userConfig:await c()});}else o==="none"&&t.push("--no-workspace");}async function Af(t,e){if(e.json||e.explicitWorkspace||Ae(t)||!process.stdin.isTTY||!(await Td({sourcePath:t})).parentEligible)return;let o=Dd(),{workspaceMode:n}=await b$1([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:o,default:Ld()}]);return n}async function Rf(t,e){let{registerWorkspaceAtPath:r}=await import('./create-P4XJVZCL.js');await r(t,{skipGit:true,yes:true,testMode:process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",userConfig:await c(),lifecycleTransaction:e});}async function xf(t){await M__default.ensureDir(t);let e=b.join(t,"lifecycle.lock"),r=Date.now();for(;;)try{let o=await $.promises.open(e,"wx");return await o.writeFile(`${JSON.stringify({pid:process.pid})}
+`),async()=>{await o.close().catch(()=>{}),await M__default.remove(e).catch(()=>{});}}catch(o){if(o.code!=="EEXIST")throw o;let n=await M__default.readJson(e).catch(()=>null),a=Number(n?.pid),i=false;if(Number.isInteger(a)&&a>0)try{process.kill(a,0),i=true;}catch(c){i=c.code==="EPERM";}if(!i){await M__default.remove(e).catch(()=>{});continue}if(Date.now()-r>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function Vn(t,e={}){let r$1=b.join(q$2(),"transactions"),o=await xf(r$1),n;try{await b$9(r$1),n=await a$a({journalDirectory:r$1});}catch(i){throw await o(),i}let a=new Set([b.join(q$2(),"workspaces.json"),b.join(r(),"workspaces.json"),a$b(t,g$2),e$6(t,g$2),a$b(t,a$c),e$6(t,a$c),...t$1(t,"imported-projects.json")]);if(e.projectPath){a.add(v$1(e.projectPath,"project.json")),a.add(v$1(e.projectPath,"context.json")),a.add(v$1(e.projectPath,"file-hashes.json")),a.add(v$1(e.projectPath,"adopt.json")),a.add(v$1(e.projectPath,"adopt-readiness.json")),a.add(b.join(e.projectPath,f$1)),a.add(b.join(e.projectPath,g$3)),a.add(b.join(e.projectPath,h$1)),a.add(b.join(e.projectPath,b$a)),a.add(b.join(e.projectPath,i$1));for(let i of g$4)a.add(b.join(e.projectPath,i));for(let i of await j$4({workspacePath:t,projectPath:e.projectPath}))a.add(i);a.add(b.join(e.projectPath,"AGENTS.md")),a.add(b.join(e.projectPath,".gitignore"));}try{let i=new Set,c=e.projectPath;for(let p of a){let u=c&&(p===b.join(c,"AGENTS.md")||g$4.some(j=>p===b.join(c,j)))?await M__default.lstat(p).catch(j=>{if(j.code==="ENOENT")return null;throw j}):null,g=p;if(u?.isSymbolicLink()&&c){let j=await a$d(c,p);if(!j)continue;g=j;}i.has(g)||(await n.captureFile(g),i.add(g));}if(c)for(let p of [a$e,b$b,".agents",".amazonq",".claude",".cursor",".github",".grok",".vscode",".windsurf"])await n.captureOwnedTree(b.join(c,p));e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let l=false;return {captureFile:p=>n.captureFile(p),captureOwnedTree:p=>n.captureOwnedTree(p),registerCompensation:p=>n.registerCompensation(p),commit:async()=>{l||(await n.commit(),l=true,await o());},rollback:async()=>{if(!l){l=true;try{await n.rollback();}finally{await o();}}}}}catch(i){throw await n.rollback().catch(()=>{}),await o(),i}}async function Ir(t,e){try{await t.rollback();}catch(r){throw new AggregateError([e,r],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function _r(t,e$1,r,o={}){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await M__default.pathExists(e$1)){e.warn(`Created project path was not found for workspace linking: ${e$1}`);return}let n=Ae(e$1)||Ae(process.cwd()),a=false,i;if(n)i=await Vn(n,{projectPath:e$1});else {n=p$2(),i=await Vn(n,{projectPath:e$1,ownedWorkspace:n});try{n=(await Us()).workspacePath;}catch(l){await Ir(i,l);}a=true;}let c="managed";try{await p$5(e$1);let l=b.relative(n,e$1);(l.startsWith("..")||b.isAbsolute(l))&&(c=(await hs({source:e$1,workspacePath:n,name:r})).relationship);let{registerProjectInWorkspaceStrict:f,registerWorkspaceStrict:u}=await import('./workspace-CBQDOUSH.js'),{syncWorkspaceContract:g}=await import('./workspace-contract-PMHUUKFM.js'),{resolveWorkspaceRegistrationName:j}=await import('./workspace-marker-7U3NYRPJ.js');await u(n,await j(n)),await f(n,r,e$1),await g({workspacePath:n,strict:true});let{syncProjectIntelligenceLens:y}=await import('./project-intelligence-lens-JCHFOIA7.js');await y({workspacePath:n,projectPath:e$1,projectName:r,relationship:c==="adopted"?"adopted":"managed",mode:"managed"}),await fo(n,{strict:true}),await o.beforeCommit?.({workspacePath:n,registerCompensation:i.registerCompensation}),await i.commit();}catch(l){await Ir(i,l);}return a&&(console.log(s.gray(`\u2139\uFE0F  Project created outside a Workspai workspace \u2014 linked to managed workspace "${j$3}" (${c}).`)),console.log(s.gray(`   Registry: ${b.join(q$2(),"workspaces.json")}`)),console.log(s.gray(`   Workspace: ${n}`))),n}async function Ud(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=H(t[2]);if(!e)return 1;let r=t[3];if(!r)return process.stderr.write(`Usage: workspai create project ${e.id} <name> [--agent-name <name>] [--output <dir>] [--dry-run]
 `),1;if(t.includes("--no-workspace"))return process.stderr.write(`Agent framework projects require Workspai workspace governance.
 `),1;try{j(r);}catch(p){return process.stderr.write(`${p instanceof Error?p.message:String(p)}
-`),1}let o=_e(t,"--output")||process.cwd(),n=P.resolve(o,r),a=_e(t,"--agent-name")?.trim()||"primary",i=_e(t,"--granted-by")?.trim()||"operator";if(t.includes("--dry-run"))return console.log(s.bold(`
+`),1}let o=_e(t,"--output")||process.cwd(),n=b.resolve(o,r),a=_e(t,"--agent-name")?.trim()||"primary",i=_e(t,"--granted-by")?.trim()||"operator";if(t.includes("--dry-run"))return console.log(s.bold(`
 AI Agent \xB7 ${e.label}`)),console.log(s.gray(`   Target: ${n}`)),console.log(s.gray(`   Agent: ${a}`)),console.log(s.gray("   Plan: register project, create Goal/PCC, then apply admitted scaffold")),console.log(s.gray("   Dry run: no files or workspace evidence will be changed.")),0;if(await M__default.pathExists(n))return process.stderr.write(`\u274C Directory "${n}" already exists
-`),1;let c=false,l=null;try{if(await M__default.ensureDir(P.dirname(n)),await J({projectPath:n,projectName:r,kit:e}),c=true,await Er(t,n,r,{beforeCommit:async({workspacePath:g,registerCompensation:u})=>{let f=await eo({workspacePath:g,project:r,runtime:e.runtime,instanceName:a,mode:"scaffold",intent:`Create ${r} as a governed ${e.label} project`});if(u(async()=>{let{abortProofCarryingChange:k}=await import('./proof-carrying-change-BAP2C3KV.js');await k({workspacePath:g,changeId:f.changeId,reason:"Agent framework project creation transaction rolled back.",actorId:"workspai-agent-framework"}).catch(()=>{});}),f.status!=="planned")throw new Error(`Agent framework scaffold is ${f.status}: ${f.blockers.join(" ")}`);let b=await ln({prepared:f,grantedBy:i});l=b,u(()=>M__default.remove(P.join(g,b.ownershipReceipt)));}}),!t.includes("--skip-git")&&!t.includes("--no-git")){let{initializeStandaloneGitRepository:g}=await import('./create-7UENFCJK.js');await g(n,a$8("Preparing git repository",{component:"create.agent-framework",phase:"git-init",metadata:{projectName:r,kit:e.id}}),"chore: initialize Workspai agent project");}console.log(s.green(`\u2714 Governed ${e.label} project created at ${n}`)),console.log(s.gray("   Dependencies were not installed and no model was called."));let p=l;if(p){console.log(s.gray(`   Change: ${p.changeId}`)),console.log(s.gray(`   Ownership: ${p.ownershipReceipt}`));for(let g of p.nextActions)console.log(s.gray(`   Next: ${g}`));}return 0}catch(p){return c&&await M__default.remove(n).catch(()=>{}),process.stderr.write(`Workspai ${e.id} generator failed: ${p instanceof Error?p.message:String(p)}
-`),1}}async function bs(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],r=a$3(e),o=t[3];if(!r||r.owner!=="npm")return 1;if(!o)return process.stderr.write(`Usage: ${r.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
-`),1;try{j(o);}catch(u){let f=u instanceof Error?u.message:String(u);return process.stderr.write(`${f}
-`),1}let n=mf(r.id,t);if(n)return process.stderr.write(`${n}
-`),1;let a=_e(t,"--output")||process.cwd(),i=P.resolve(a,o),c=t.includes("--skip-git")||t.includes("--no-git"),l=t.includes("--skip-install"),p=t.includes("--dry-run"),g=false;try{let{default:u}=await import('fs-extra');return await u.pathExists(i)?(process.stderr.write(`\u274C Directory "${i}" already exists
+`),1;let c=false,l=null;try{if(await M__default.ensureDir(b.dirname(n)),await J({projectPath:n,projectName:r,kit:e}),c=true,await _r(t,n,r,{beforeCommit:async({workspacePath:f,registerCompensation:u})=>{let g=await oo({workspacePath:f,project:r,runtime:e.runtime,instanceName:a,mode:"scaffold",intent:`Create ${r} as a governed ${e.label} project`});if(u(async()=>{let{abortProofCarryingChange:y}=await import('./proof-carrying-change-LAYV4LTI.js');await y({workspacePath:f,changeId:g.changeId,reason:"Agent framework project creation transaction rolled back.",actorId:"workspai-agent-framework"}).catch(()=>{});}),g.status!=="planned")throw new Error(`Agent framework scaffold is ${g.status}: ${g.blockers.join(" ")}`);let j=await mn({prepared:g,grantedBy:i});l=j,u(()=>M__default.remove(b.join(f,j.ownershipReceipt)));}}),!t.includes("--skip-git")&&!t.includes("--no-git")){let{initializeStandaloneGitRepository:f}=await import('./create-P4XJVZCL.js');await f(n,a$8("Preparing git repository",{component:"create.agent-framework",phase:"git-init",metadata:{projectName:r,kit:e.id}}),"chore: initialize Workspai agent project");}console.log(s.green(`\u2714 Governed ${e.label} project created at ${n}`)),console.log(s.gray("   Dependencies were not installed and no model was called."));let p=l;if(p){console.log(s.gray(`   Change: ${p.changeId}`)),console.log(s.gray(`   Ownership: ${p.ownershipReceipt}`));for(let f of p.nextActions)console.log(s.gray(`   Next: ${f}`));}return 0}catch(p){return c&&await M__default.remove(n).catch(()=>{}),process.stderr.write(`Workspai ${e.id} generator failed: ${p instanceof Error?p.message:String(p)}
+`),1}}async function Os(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],r=a$3(e),o=t[3];if(!r||r.owner!=="npm")return 1;if(!o)return process.stderr.write(`Usage: ${r.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
+`),1;try{j(o);}catch(u){let g=u instanceof Error?u.message:String(u);return process.stderr.write(`${g}
+`),1}let n=Ef(r.id,t);if(n)return process.stderr.write(`${n}
+`),1;let a=_e(t,"--output")||process.cwd(),i=b.resolve(a,o),c=t.includes("--skip-git")||t.includes("--no-git"),l=t.includes("--skip-install"),p=t.includes("--dry-run"),f=false;try{let{default:u}=await import('fs-extra');return await u.pathExists(i)?(process.stderr.write(`\u274C Directory "${i}" already exists
 `),1):p?(console.log(s.bold(`
-${r.label}`)),console.log(s.gray(`   Runtime: ${r.runtime}`)),console.log(s.gray(`   Target: ${i}`)),console.log(s.gray("   Dry run: no files or workspace state will be changed.")),0):(await u.ensureDir(P.dirname(i)),await u.ensureDir(i),g=true,await e$4(r,{projectName:o,projectPath:i,args:t,skipGit:c,skipInstall:l}),await Ts(t,process.cwd()),await Er(t,i,o),0)}catch(u){if(g){let{default:f}=await import('fs-extra');await f.remove(i).catch(()=>{});}return process.stderr.write(`Workspai ${r.id} generator failed: ${u?.message??u}
-`),1}}async function Td(t){let e=l$5(t[2]);if(!e)return 1;let r;try{let o=await p$7({args:t});return o.dryRun||(r=o.projectPath,await Er(t,o.projectPath,o.projectName)),0}catch(o){return r&&await M__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
+${r.label}`)),console.log(s.gray(`   Runtime: ${r.runtime}`)),console.log(s.gray(`   Target: ${i}`)),console.log(s.gray("   Dry run: no files or workspace state will be changed.")),0):(await u.ensureDir(b.dirname(i)),await u.ensureDir(i),f=true,await e$4(r,{projectName:o,projectPath:i,args:t,skipGit:c,skipInstall:l}),await Hs(t,process.cwd()),await _r(t,i,o),0)}catch(u){if(f){let{default:g}=await import('fs-extra');await g.remove(i).catch(()=>{});}return process.stderr.write(`Workspai ${r.id} generator failed: ${u?.message??u}
+`),1}}async function qd(t){let e=l$5(t[2]);if(!e)return 1;let r;try{let o=await p$7({args:t});return o.dryRun||(r=o.projectPath,await _r(t,o.projectPath,o.projectName)),0}catch(o){return r&&await M__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
 `),t[3]||process.stderr.write(`Usage: ${o$5(e.id)}
-`),1}}async function Md(t){let e=r$4(t[2]);if(!e)return 1;let r;try{let o=await u$2(t);return o.dryRun||(r=o.projectPath,await Er(t,o.projectPath,o.projectName)),0}catch(o){return r&&await M__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
+`),1}}async function zd(t){let e=r$4(t[2]);if(!e)return 1;let r;try{let o=await u$2(t);return o.dryRun||(r=o.projectPath,await _r(t,o.projectPath,o.projectName)),0}catch(o){return r&&await M__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
 `),t[3]||process.stderr.write(`Usage: ${t$3(e.kitId)}
-`),1}}async function Nn(t,e$1){if(t.includes("--json"))return process.stderr.write("Workspai CLI offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(t[0]!=="create")return 1;if(t[1]!=="project")return process.stderr.write(`Workspai CLI could not run the Python core engine for \`create\`.
+`),1}}async function Dn(t,e$1){if(t.includes("--json"))return process.stderr.write("Workspai CLI offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(t[0]!=="create")return 1;if(t[1]!=="project")return process.stderr.write(`Workspai CLI could not run the Python core engine for \`create\`.
 Reason: ${e$1}.
 Install Python 3.10+ to use the interactive wizard and full kit catalog.
 `),1;let n=t[2],a=t[3];if(!n||!a)return process.stderr.write(`Usage: npx workspai create project <kit> <name> [--output <dir>]
 Tip: offline fallback supports only fastapi* and nestjs* kits.
-`),1;let i=of(n);if(!i)return process.stderr.write(`Workspai CLI could not run the Python core engine to create this kit.
+`),1;let i=wf(n);if(!i)return process.stderr.write(`Workspai CLI could not run the Python core engine to create this kit.
 Reason: ${e$1}.
 Requested kit: ${n}
 Offline fallback only supports: fastapi.standard, nestjs.standard (and their shorthands).
 Install Python 3.10+ to access all kits.
-`),1;let c=_e(t,"--output")||process.cwd(),l=P.resolve(c,a),p=false,g=t.includes("--skip-git")||t.includes("--no-git"),u=t.includes("--skip-install");try{if(await M__default.ensureDir(P.dirname(l)),await M__default.pathExists(l))return process.stderr.write(`\u274C Directory "${l}" already exists
-`),1;let f="pip",b=Ie(process.cwd());if(b)try{let{readWorkspaceMarker:S}=await import('./workspace-marker-7U3NYRPJ.js'),A=await S(b);A?.metadata?.npm?.installMethod&&(f=A.metadata.npm.installMethod,e.debug(`Detected workspace engine: ${f}`));}catch(S){e.debug("Failed to read workspace marker",S);}else e.debug("No workspace found, using default engine: pip");await M__default.ensureDir(l),p=true;let{generateDemoKit:k}=await import('./demo-kit-ALW6OSQV.js');return await k(l,{project_name:a,template:i,kit_name:n,skipGit:g,skipInstall:u,engine:f}),await Ts(t,process.cwd()),await Er(t,l,a),0}catch(f){return p&&await M__default.remove(l).catch(()=>{}),process.stderr.write(`Workspai CLI offline fallback failed: ${f?.message??f}
-`),1}}function ff(t){let e=t.requested||"requested stack";if(process.stderr.write(`${s.yellow("Workspai native create is not available for this request yet.")}
+`),1;let c=_e(t,"--output")||process.cwd(),l=b.resolve(c,a),p=false,f=t.includes("--skip-git")||t.includes("--no-git"),u=t.includes("--skip-install");try{if(await M__default.ensureDir(b.dirname(l)),await M__default.pathExists(l))return process.stderr.write(`\u274C Directory "${l}" already exists
+`),1;let g="pip",j=Ae(process.cwd());if(j)try{let{readWorkspaceMarker:S}=await import('./workspace-marker-7U3NYRPJ.js'),E=await S(j);E?.metadata?.npm?.installMethod&&(g=E.metadata.npm.installMethod,e.debug(`Detected workspace engine: ${g}`));}catch(S){e.debug("Failed to read workspace marker",S);}else e.debug("No workspace found, using default engine: pip");await M__default.ensureDir(l),p=true;let{generateDemoKit:y}=await import('./demo-kit-ALW6OSQV.js');return await y(l,{project_name:a,template:i,kit_name:n,skipGit:f,skipInstall:u,engine:g}),await Hs(t,process.cwd()),await _r(t,l,a),0}catch(g){return p&&await M__default.remove(l).catch(()=>{}),process.stderr.write(`Workspai CLI offline fallback failed: ${g?.message??g}
+`),1}}function If(t){let e=t.requested||"requested stack";if(process.stderr.write(`${s.yellow("Workspai native create is not available for this request yet.")}
 `),process.stderr.write(s.gray(`Requested: ${e}
 `)),process.stderr.write(s.gray(`Lane: ${t.lane} (${t.status})
 `)),process.stderr.write(s.gray(`Reason: ${t.reason}
 `)),t.officialCommands?.length){process.stderr.write(s.gray(`Official generator candidates:
 `));for(let r of t.officialCommands)process.stderr.write(s.gray(`  - ${r}
-`));}process.stderr.write(s.gray("Use an external generator if needed, then run `npx workspai adopt <project-path>` to add Workspace Intelligence.\n"));}function Wd(){console.log(`Usage: npx workspai create project <kit> <name> [options]
+`));}process.stderr.write(s.gray("Use an external generator if needed, then run `npx workspai adopt <project-path>` to add Workspace Intelligence.\n"));}function Yd(){console.log(`Usage: npx workspai create project <kit> <name> [options]
 
 Scaffold a project and register it with Workspace Intelligence.
 
@@ -238,7 +238,7 @@ Notes:
   Turning the current folder into a workspace creates only the Workspai foundation;
   it does not install the optional Python engine.
   Python-backed kits delegate execution to RapidKit Core when needed, but the
-  Workspai CLI owns the command UX, workspace registration, and artifacts.`);}function hf(){console.log(`Usage: npx workspai create workspace [name] [options]
+  Workspai CLI owns the command UX, workspace registration, and artifacts.`);}function _f(){console.log(`Usage: npx workspai create workspace [name] [options]
 
 Create a Workspai workspace and initialize Workspace Intelligence files.
 
@@ -262,7 +262,7 @@ Mental model:
       \u2193
   Workspace Intelligence
       \u2193
-  Developers \xB7 CI \xB7 IDEs \xB7 AI Agents`);}function wf(){console.log(`Usage: npx workspai create <workspace|project> [options]
+  Developers \xB7 CI \xB7 IDEs \xB7 AI Agents`);}function Of(){console.log(`Usage: npx workspai create <workspace|project> [options]
 
 Create a workspace or scaffold a project into Workspace Intelligence.
 
@@ -275,82 +275,82 @@ Shortcuts:
 
 Run:
   npx workspai create workspace --help
-  npx workspai create project --help`);}function yf(t){let e=t[2]??"<kit>",r=t[3]??"<name>",o=_e(t,"--output")||process.cwd();console.log("Workspai create project dry run (Dry-run mode)"),console.log(`  kit: ${e}`),console.log(`  name: ${r}`),console.log(`  output: ${P.resolve(o)}`),console.log("  execution: RapidKit Core bridge"),console.log("  writes: none"),console.log(""),console.log("Run without --dry-run to scaffold the project.");}async function Cs(t){if(t[0]==="create"&&(t.includes("--help")||t.includes("-h")||t.includes("help")))return t[1]==="project"?Wd():t[1]==="workspace"?hf():wf(),0;let e$1=t[0]==="create"&&t[1]==="frontend",r=n$5(t);if(r&&(t=r),e$1&&!m$6(t[2]))return process.stderr.write(`Unknown frontend generator: ${t[2]?.replace(/^frontend\./,"")}
+  npx workspai create project --help`);}function Nf(t){let e=t[2]??"<kit>",r=t[3]??"<name>",o=_e(t,"--output")||process.cwd();console.log("Workspai create project dry run (Dry-run mode)"),console.log(`  kit: ${e}`),console.log(`  name: ${r}`),console.log(`  output: ${b.resolve(o)}`),console.log("  execution: RapidKit Core bridge"),console.log("  writes: none"),console.log(""),console.log("Run without --dry-run to scaffold the project.");}async function Ns(t){if(t[0]==="create"&&(t.includes("--help")||t.includes("-h")||t.includes("help")))return t[1]==="project"?Yd():t[1]==="workspace"?_f():Of(),0;let e$1=t[0]==="create"&&t[1]==="frontend",r=n$5(t);if(r&&(t=r),e$1&&!m$6(t[2]))return process.stderr.write(`Unknown frontend generator: ${t[2]?.replace(/^frontend\./,"")}
 `),process.stderr.write(`Usage: ${o$5()}
-`),1;if(process.env.RAPIDKIT_FORCE_OFFLINE_CREATE_FALLBACK==="1"&&t[0]==="create")return Nn(t,"PYTHON_NOT_FOUND");let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace","--here"]);if(t[0]==="create"&&(!t[1]||t[1].startsWith("-"))){let n=t.includes("--yes")||t.includes("-y"),a$1=t.slice(1),i;if(!process.stdin.isTTY||n)i="workspace",process.stdin.isTTY&&console.log(s.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."));else {process.stdin.isTTY&&a("create");let l=Ie(process.cwd()),p=l?P.basename(l):null;i=(await b([{type:"rawlist",name:"createTarget",message:p?`What would you like to add to ${p}?`:"What would you like to set up?",choices:xd(p)}])).createTarget;}if(i==="existing"){let l=Ie(process.cwd()),{source:p}=await b([_d()]),g=Id(p);if(g.kind==="workspace-archive"){let f=await ds({archivePathOrUrl:g.source,projectGrounding:"managed"});console.log(s.green(`\u2714 Workspace imported and registered: ${f.workspacePath}`));for(let b of f.warnings)console.log(s.yellow(`   \u26A0 ${b}`));return 0}if(g.kind==="git-project")return await xs(g.source,{workspace:l??void 0});if(g.kind==="local-workspace"){let f=await ps({workspacePath:g.source,projectGrounding:"managed"});console.log(s.green(`\u2714 Workspace connected: ${f.workspacePath}`));for(let b of f.warnings)console.log(s.yellow(`   \u26A0 ${b}`));return 0}let{existingProjectMode:u}=await b([{type:"rawlist",name:"existingProjectMode",message:"How should Workspai add this project?",choices:[{name:"Keep it where it is (recommended)",value:"link"},{name:"Copy it into the workspace",value:"copy"}]}]);return u==="link"?await nu(g.source,{workspace:l??void 0,projectGrounding:"managed"}):await xs(g.source,{workspace:l??void 0,projectGrounding:"managed"})}let c=["create",i,...a$1];return await Cs(c)}if(t[0]==="create"&&t[1]==="workspace")try{let n$1=t.includes("--yes")||t.includes("-y"),a$2=t.includes("--skip-git")||t.includes("--no-git"),i$1=t.includes("--skip-python-engine")||t.includes("--no-python-engine"),c$1=t.includes("--dry-run"),l=t[2]&&!t[2].startsWith("-")?t[2]:void 0,p=_e(t,"--install-method"),g=p==="poetry"||p==="venv"||p==="pipx"?p:void 0,u=_e(t,"--profile"),f=u==="minimal"||u==="java-only"||u==="go-only"||u==="dotnet-only"||u==="python-only"||u==="node-only"||u==="polyglot"||u==="enterprise"?u:void 0,b$1=l;if(b$1||(n$1?b$1="my-workspace":(process.stdin.isTTY&&a("create workspace"),b$1=(await b([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName)),!b$1||!b$1.trim())return process.stderr.write(`Workspace name is required.
-`),1;try{j(b$1);}catch(w){if(w instanceof a$1)return process.stderr.write(`${w.message}
-`),1;throw w}let k$1=await k(t,{hasYes:n$1}),S=i(b$1.trim(),{argv:t,outputParent:k$1});c$1||await M__default.ensureDir(P.dirname(S));let A=n(b$1.trim());if(!c$1&&(j$1(A,S,{outputParent:k$1})&&A&&await M__default.pathExists(A)||await M__default.pathExists(S)))return process.stderr.write(`\u274C Workspace "${b$1}" already exists
-`),A&&A!==S&&process.stderr.write(`   Found at: ${A}
-`),1;let E=await c(),d=E.author||process.env.USER||"Workspai User";if(!n$1){let w=await b([{type:"input",name:"author",message:"Author name:",default:d}]);w.author?.trim()&&(d=w.author.trim());}let{createProject:m}=await import('./create-7UENFCJK.js');return await m(b$1,{skipGit:a$2,skipPythonEngine:i$1,yes:n$1,dryRun:c$1,userConfig:{...E,author:d},installMethod:g,profile:f,parentDirectory:P.dirname(S)}),0}catch(n){return n instanceof a$1?(process.stderr.write(`
+`),1;if(process.env.RAPIDKIT_FORCE_OFFLINE_CREATE_FALLBACK==="1"&&t[0]==="create")return Dn(t,"PYTHON_NOT_FOUND");let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace","--here"]);if(t[0]==="create"&&(!t[1]||t[1].startsWith("-"))){let n=t.includes("--yes")||t.includes("-y"),a$1=t.slice(1),i;if(!process.stdin.isTTY||n)i="workspace",process.stdin.isTTY&&console.log(s.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."));else {process.stdin.isTTY&&a("create");let l=Ae(process.cwd()),p=l?b.basename(l):null;i=(await b$1([{type:"rawlist",name:"createTarget",message:p?`What would you like to add to ${p}?`:"What would you like to set up?",choices:Vd(p)}])).createTarget;}if(i==="existing"){let l=Ae(process.cwd()),{source:p}=await b$1([Jd()]),f=Kd(p);if(f.kind==="workspace-archive"){let g=await Ps({archivePathOrUrl:f.source,projectGrounding:"managed"});console.log(s.green(`\u2714 Workspace imported and registered: ${g.workspacePath}`));for(let j of g.warnings)console.log(s.yellow(`   \u26A0 ${j}`));return 0}if(f.kind==="git-project")return await Ls(f.source,{workspace:l??void 0});if(f.kind==="local-workspace"){let g=await vs({workspacePath:f.source,projectGrounding:"managed"});console.log(s.green(`\u2714 Workspace connected: ${g.workspacePath}`));for(let j of g.warnings)console.log(s.yellow(`   \u26A0 ${j}`));return 0}let{existingProjectMode:u}=await b$1([{type:"rawlist",name:"existingProjectMode",message:"How should Workspai add this project?",choices:[{name:"Keep it where it is (recommended)",value:"link"},{name:"Copy it into the workspace",value:"copy"}]}]);return u==="link"?await hu(f.source,{workspace:l??void 0,projectGrounding:"managed"}):await Ls(f.source,{workspace:l??void 0,projectGrounding:"managed"})}let c=["create",i,...a$1];return await Ns(c)}if(t[0]==="create"&&t[1]==="workspace")try{let n$1=t.includes("--yes")||t.includes("-y"),a$2=t.includes("--skip-git")||t.includes("--no-git"),i$1=t.includes("--skip-python-engine")||t.includes("--no-python-engine"),c$1=t.includes("--dry-run"),l=t[2]&&!t[2].startsWith("-")?t[2]:void 0,p=_e(t,"--install-method"),f=p==="poetry"||p==="venv"||p==="pipx"?p:void 0,u=_e(t,"--profile"),g=u==="minimal"||u==="java-only"||u==="go-only"||u==="dotnet-only"||u==="python-only"||u==="node-only"||u==="polyglot"||u==="enterprise"?u:void 0,j$2=l;if(j$2||(n$1?j$2="my-workspace":(process.stdin.isTTY&&a("create workspace"),j$2=(await b$1([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName)),!j$2||!j$2.trim())return process.stderr.write(`Workspace name is required.
+`),1;try{j(j$2);}catch(w){if(w instanceof a$1)return process.stderr.write(`${w.message}
+`),1;throw w}let y=await k(t,{hasYes:n$1}),S=i(j$2.trim(),{argv:t,outputParent:y});c$1||await M__default.ensureDir(b.dirname(S));let E=n(j$2.trim());if(!c$1&&(j$1(E,S,{outputParent:y})&&E&&await M__default.pathExists(E)||await M__default.pathExists(S)))return process.stderr.write(`\u274C Workspace "${j$2}" already exists
+`),E&&E!==S&&process.stderr.write(`   Found at: ${E}
+`),1;let R=await c(),d=R.author||process.env.USER||"Workspai User";if(!n$1){let w=await b$1([{type:"input",name:"author",message:"Author name:",default:d}]);w.author?.trim()&&(d=w.author.trim());}let{createProject:m}=await import('./create-P4XJVZCL.js');return await m(j$2,{skipGit:a$2,skipPythonEngine:i$1,yes:n$1,dryRun:c$1,userConfig:{...R,author:d},installMethod:f,profile:g,parentDirectory:b.dirname(S)}),0}catch(n){return n instanceof a$1?(process.stderr.write(`
 \u274C ${n.message}
 `),n.details&&process.stderr.write(`
 ${n.details}
 `),e.debug("Create workspace error",{code:n.code,stack:n.stack})):(process.stderr.write(`Workspai CLI failed to create workspace: ${n?.message??n}
-`),e.debug("Unexpected create workspace error",n)),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))return Wd(),0;if(!t[2]||t[2].startsWith("-")){process.stdin.isTTY&&a("create project");let{kitCategory:A}=await b([{type:"rawlist",name:"kitCategory",message:"What are you building?",choices:b$l()}]),{kitChoice:E}=await b([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:a$M(A)}]);if(I(E)||d$1(E)||m$6(E)||s$3(E)){let w=ss(E),{projectName:y}=await b([{type:"input",name:"projectName",message:"Project name:",default:w,validate:R=>R.trim().length>0||"Project name is required"}]),h=t.slice(2).filter(R=>R.startsWith("-")),v=["create","project",E,y.trim(),...h];return await Nd(E)?(await hs(v),I(E)?await $d(v):m$6(E)?await Td(v):s$3(E)?await Md(v):await bs(v)):1}let d=ss(E),{projectName:m}=await b([{type:"input",name:"projectName",message:"Project name:",default:d,validate:w=>w.trim().length>0||"Project name is required"}]);t.splice(2,0,E,m.trim());}let a$1=t[2];if(I(a$1))return await hs(t,{requireWorkspace:true}),await $d(t);let i=a$N({kitId:a$1,framework:a$1,runtime:a$1});if(b$m(i))return ff(i),1;if(!await Nd(t[2]||""))return 1;if(await hs(t),d$1(t[2]))return await bs(t);if(m$6(t[2]))return await Td(t);if(s$3(t[2]))return await Md(t);if(t.includes("--skip-python-engine")||t.includes("--no-python-engine"))return process.stderr.write("`--skip-python-engine` is a workspace creation option. For projects, use `--skip-install` to scaffold first, then run `npx workspai init` when ready.\n"),1;if(t.includes("--dry-run"))return yf(t),0;let c=t[3],l=_e(t,"--output")||process.cwd(),p=c?P.resolve(l,c):void 0;if(p&&await M__default.pathExists(p))return process.stderr.write(`\u274C Project "${c}" already exists.
+`),e.debug("Unexpected create workspace error",n)),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))return Yd(),0;if(!t[2]||t[2].startsWith("-")){process.stdin.isTTY&&a("create project");let{kitCategory:E}=await b$1([{type:"rawlist",name:"kitCategory",message:"What are you building?",choices:b$o()}]),{kitChoice:R}=await b$1([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:a$N(E)}]);if(I(R)||d$1(R)||m$6(R)||s$3(R)){let w=ms(R),{projectName:k}=await b$1([{type:"input",name:"projectName",message:"Project name:",default:w,validate:x=>x.trim().length>0||"Project name is required"}]),h=t.slice(2).filter(x=>x.startsWith("-")),v=["create","project",R,k.trim(),...h];return await Bd(R)?(await Es(v),I(R)?await Ud(v):m$6(R)?await qd(v):s$3(R)?await zd(v):await Os(v)):1}let d=ms(R),{projectName:m}=await b$1([{type:"input",name:"projectName",message:"Project name:",default:d,validate:w=>w.trim().length>0||"Project name is required"}]);t.splice(2,0,R,m.trim());}let a$1=t[2];if(I(a$1))return await Es(t,{requireWorkspace:true}),await Ud(t);let i=a$O({kitId:a$1,framework:a$1,runtime:a$1});if(b$p(i))return If(i),1;if(!await Bd(t[2]||""))return 1;if(await Es(t),d$1(t[2]))return await Os(t);if(m$6(t[2]))return await qd(t);if(s$3(t[2]))return await zd(t);if(t.includes("--skip-python-engine")||t.includes("--no-python-engine"))return process.stderr.write("`--skip-python-engine` is a workspace creation option. For projects, use `--skip-install` to scaffold first, then run `npx workspai init` when ready.\n"),1;if(t.includes("--dry-run"))return Nf(t),0;let c=t[3],l=_e(t,"--output")||process.cwd(),p=c?b.resolve(l,c):void 0;if(p&&await M__default.pathExists(p))return process.stderr.write(`\u274C Project "${c}" already exists.
 `),process.stderr.write(`   Target: ${p}
 `),process.stderr.write(`\u{1F4A1} Choose a different name, or inspect and move/remove the existing directory first.
-`),1;let u=[...t.filter(A=>{let E=A.split("=")[0];return !o.has(A)&&!o.has(E)})],f=Ie(process.cwd()),b$1=t.includes("--skip-install");b$1&&!u.includes("--skip-essentials")&&u.push("--skip-essentials");let S=b$1||!!f?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await d$8();let A=await e$2(u,{cwd:process.cwd(),env:S});if(A===0&&f&&!t.includes("--skip-install")&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init"))),A===0){await Ts(t,process.cwd());let E=t[3],d=_e(t,"--output")||process.cwd(),m=E?P.resolve(d,E):void 0,w=E&&m?await Er(t,m,E).catch(async y=>{throw await M__default.remove(m).catch(()=>{}),y}):f;if(w)try{if(E&&m){let y=P.join(w,".python-version"),h=P.join(m,".python-version");if(O.existsSync(y)&&O.existsSync(m)){let v=O.readFileSync(y,"utf-8");O.writeFileSync(h,v.trim()+`
-`),e.debug(`Synced Python version ${v.trim()} from workspace to ${E}`);}}}catch(y){e.debug("Could not sync Python version from workspace:",y);}}return A}catch(A){let E=ms(A);return E?await Nn(t,E):(process.stderr.write(`Workspai failed to run the Python core engine: ${A?.message??A}
-`),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$8();let n=await e$2(t,{cwd:process.cwd()});if(n===0){let a=Ie(process.cwd());if(a){let{syncWorkspaceProjects:i}=await import('./workspace-PAXTJCMH.js');await i(a,true);}}return n}catch(n){let a=ms(n);return a?await Nn(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
-`),1)}return await d$8(),await e$2(t,{cwd:process.cwd()})}catch(n){let a=ms(n);return a?await Nn(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
-`),1)}}var Dd=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],kf=[...w$2,"autopilot","pipeline","import","adopt","snapshot","live","ai","config","product","infra","shell","commands"],vf=["init"],Pf=r$3,Ld=[...Pf,...s$4];function jf(t){return !!t&&tf.includes(t)}function Ss(t){let e=t[0],r=t[1];return e==="project"&&(r==="--help"||r==="-h"||r==="help")?true:ef.some(([o,n])=>e!==o?false:r?r===n:true)}function lo(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?Ss(t):jf(t[0])||Ss(t)}function bf(t){return !!t&&kf.includes(t)}function Fd(t){return bf(t[0])||Ss(t)}function Gd(t){return !!t&&ts.includes(t)}async function Vd(t,e){switch(t){case "bootstrap":return Ff(e);case "setup":return Gf(e);case "cache":return Jf(e);case "mirror":return Hf(e);default:{let r=t;throw new Error(`Unreachable npm-only manual command: ${String(r)}`)}}}function Cf(t=process.env){let e=t.npm_config_user_agent||"",r=t.npm_execpath||"",o=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(r)||o==="exec"||o==="x"}function Yd(t={}){let e=D(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai project command capabilities")),console.log(s.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(s.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(s.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(s.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(s.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(s.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function Sf(){return {schemaVersion:pd,cli:"workspai",version:h(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:as,contracts:so(),contractCatalog:An()}}function Xd(){let t=Zp(he),e=[...t.topLevelCommands],r=[...a$5].filter(i=>!e.includes(i)),o=["init","dev","start","build","test","lint","format","help"],n=[...no],a=[...Pn];return {schemaVersion:as,scope:"global",cli:"workspai",version:h(),cwd:process.cwd(),contracts:so(),contractCatalog:An(),commands:{npmOwned:e,coreBacked:r,projectScoped:o},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:a},commandMap:Object.fromEntries([...e.map(i=>[i,{command:i,owner:"npm-wrapper",status:"supported",scope:i==="project"?"project-introspection":"workspace"}]),...r.map(i=>[i,{command:i,owner:"python-core",status:"delegated",scope:"core"}]),...o.map(i=>[i,{command:i,owner:"runtime-adapter",status:i==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function Ef(t={}){let e=Xd();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(ed(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai command capabilities")),console.log(s.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(s.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(s.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(s.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(s.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(s.gray("Tip: run `workspai project commands --json` inside a project."));}function Es(t){return F$1(t)?(Yd({json:t.includes("--json")||t.includes("--ci")}),true):false}function As(t){let e=D(process.cwd());if(!e.projectRoot)return  false;let r=E(t,process.cwd());if(!r||r.status!=="unsupported")return  false;console.error(s.red(G(r,e))),process.exit(1);}function ot(t){return O.existsSync(P.join(t,".workspai-workspace"))||O.existsSync(P.join(t,".workspai","workspace.json"))||O.existsSync(P.join(t,".rapidkit-workspace"))||O.existsSync(P.join(t,".rapidkit","workspace.json"))}function Qd(t){let e=t;for(;;){let r=u(e,"context.json").find(n=>O.existsSync(n));if(r)return r;let o=P.dirname(e);if(o===e)break;e=o;}return null}function Rs(t){let e=t,r=P.resolve(tmpdir());for(;;){let o=[P.join(e,".workspai-workspace"),P.join(e,".rapidkit-workspace")].find(a=>O.existsSync(a));if(o&&P.resolve(e)!==r)return o;let n=P.dirname(e);if(n===e)break;e=n;}return null}function Ie(t){let e=b$4({startPath:t});return !e||P.resolve(e.workspacePath)===P.resolve(tmpdir())?null:e.workspacePath}function Zd(t){try{let r=b$4({startPath:t,strict:true})?.workspacePath??null;return {workspacePath:r&&P.resolve(r)!==P.resolve(tmpdir())?r:null,error:null}}catch(e){if(e instanceof a$2&&e.code==="project.workspace.unlinked")return {workspacePath:null,error:null};if(e instanceof a$2)return {workspacePath:null,error:e};throw e}}async function po(t,e){try{let{syncWorkspaceConsumerArtifacts:r}=await import('./workspace-onboarding-C4CKWTJ3.js');return await r(t,{silent:e?.silent})}catch(r){if(e?.strict)throw r;return e?.silent||(console.log(s.yellow(`\u26A0\uFE0F  Workspace consumer sync skipped: ${r.message}`)),console.log(s.gray("   Retry: npx workspai workspace agent-sync --write --refresh-context --preset enterprise"))),null}}async function Af(t,e=process.cwd(),r=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$2(r))return {detected:false};let n=p$3(e,r);for(let a of n){if(!await M__default.pathExists(a))continue;let i=a.toLowerCase();if(i.endsWith("rapidkit.cmd")||i.endsWith("rapidkit.exe"))return {detected:true,candidatePath:a,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function Rf(t){let e=t;for(;;){let r=P.join(e,".rapidkit-workspace"),o=P.join(e,".rapidkit","workspace.json");if(!O.existsSync(r)&&O.existsSync(o))return e;let n=P.dirname(e);if(n===e)break;e=n;}return null}var eu={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function xf(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function io(t,e){let r=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return r?r[1]==="true":eu[e]}function Jd(t){let e=t??"";return {mode:xf(e),dependency_sharing_mode:tu(e),rules:{enforce_workspace_marker:io(e,"enforce_workspace_marker"),enforce_toolchain_lock:io(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:io(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:io(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:io(e,"require_mirror_lock_for_offline")}}}function Kd(t,e,r){let o=`${e}: ${r}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`${o}
+`),1;let u=[...t.filter(E=>{let R=E.split("=")[0];return !o.has(E)&&!o.has(R)})],g=Ae(process.cwd()),j=t.includes("--skip-install");j&&!u.includes("--skip-essentials")&&u.push("--skip-essentials");let S=j||!!g?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await d$8();let E=await e$2(u,{cwd:process.cwd(),env:S});if(E===0&&g&&!t.includes("--skip-install")&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init"))),E===0){await Hs(t,process.cwd());let R=t[3],d=_e(t,"--output")||process.cwd(),m=R?b.resolve(d,R):void 0,w=R&&m?await _r(t,m,R).catch(async k=>{throw await M__default.remove(m).catch(()=>{}),k}):g;if(w)try{if(R&&m){let k=b.join(w,".python-version"),h=b.join(m,".python-version");if($.existsSync(k)&&$.existsSync(m)){let v=$.readFileSync(k,"utf-8");$.writeFileSync(h,v.trim()+`
+`),e.debug(`Synced Python version ${v.trim()} from workspace to ${R}`);}}}catch(k){e.debug("Could not sync Python version from workspace:",k);}}return E}catch(E){let R=js(E);return R?await Dn(t,R):(process.stderr.write(`Workspai failed to run the Python core engine: ${E?.message??E}
+`),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$8();let n=await e$2(t,{cwd:process.cwd()});if(n===0){let a=Ae(process.cwd());if(a){let{syncWorkspaceProjects:i}=await import('./workspace-CBQDOUSH.js');await i(a,true);}}return n}catch(n){let a=js(n);return a?await Dn(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
+`),1)}return await d$8(),await e$2(t,{cwd:process.cwd()})}catch(n){let a=js(n);return a?await Dn(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
+`),1)}}var Xd=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],$f=[...w$2,"autopilot","pipeline","import","adopt","snapshot","live","ai","config","product","infra","shell","commands"],Tf=["init"],Mf=r$3,Qd=[...Mf,...s$4];function Wf(t){return !!t&&ff.includes(t)}function $s(t){let e=t[0],r=t[1];return e==="project"&&(r==="--help"||r==="-h"||r==="help")?true:gf.some(([o,n])=>e!==o?false:r?r===n:true)}function go(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?$s(t):Wf(t[0])||$s(t)}function Df(t){return !!t&&$f.includes(t)}function Zd(t){return Df(t[0])||$s(t)}function eu(t){return !!t&&cs.includes(t)}async function tu(t,e){switch(t){case "bootstrap":return th(e);case "setup":return rh(e);case "cache":return nh(e);case "mirror":return sh(e);default:{let r=t;throw new Error(`Unreachable npm-only manual command: ${String(r)}`)}}}function Lf(t=process.env){let e=t.npm_config_user_agent||"",r=t.npm_execpath||"",o=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(r)||o==="exec"||o==="x"}function lu(t={}){let e=D(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai project command capabilities")),console.log(s.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(s.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(s.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(s.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(s.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(s.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function Ff(){return {schemaVersion:yd,cli:"workspai",version:h(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:us,contracts:lo(),contractCatalog:_n()}}function pu(){let t=id(he),e=[...t.topLevelCommands],r=[...a$5].filter(i=>!e.includes(i)),o=["init","dev","start","build","test","lint","format","help"],n=[...io],a=[...Sn];return {schemaVersion:us,scope:"global",cli:"workspai",version:h(),cwd:process.cwd(),contracts:lo(),contractCatalog:_n(),commands:{npmOwned:e,coreBacked:r,projectScoped:o},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:a},commandMap:Object.fromEntries([...e.map(i=>[i,{command:i,owner:"npm-wrapper",status:"supported",scope:i==="project"?"project-introspection":"workspace"}]),...r.map(i=>[i,{command:i,owner:"python-core",status:"delegated",scope:"core"}]),...o.map(i=>[i,{command:i,owner:"runtime-adapter",status:i==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function Gf(t={}){let e=pu();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(cd(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai command capabilities")),console.log(s.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(s.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(s.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(s.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(s.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(s.gray("Tip: run `workspai project commands --json` inside a project."));}function Ts(t){return F$1(t)?(lu({json:t.includes("--json")||t.includes("--ci")}),true):false}function Ms(t){let e=D(process.cwd());if(!e.projectRoot)return  false;let r=E(t,process.cwd());if(!r||r.status!=="unsupported")return  false;console.error(s.red(G(r,e))),process.exit(1);}function Qe(t){return $.existsSync(b.join(t,".workspai-workspace"))||$.existsSync(b.join(t,".workspai","workspace.json"))||$.existsSync(b.join(t,".rapidkit-workspace"))||$.existsSync(b.join(t,".rapidkit","workspace.json"))}function du(t){let e=t;for(;;){let r=u(e,"context.json").find(n=>$.existsSync(n));if(r)return r;let o=b.dirname(e);if(o===e)break;e=o;}return null}function Ws(t){let e=t,r=b.resolve(tmpdir());for(;;){let o=[b.join(e,".workspai-workspace"),b.join(e,".rapidkit-workspace")].find(a=>$.existsSync(a));if(o&&b.resolve(e)!==r)return o;let n=b.dirname(e);if(n===e)break;e=n;}return null}function Ae(t){let e=b$5({startPath:t});return !e||b.resolve(e.workspacePath)===b.resolve(tmpdir())?null:e.workspacePath}function Ds(t){try{let r=b$5({startPath:t,strict:true})?.workspacePath??null;return {workspacePath:r&&b.resolve(r)!==b.resolve(tmpdir())?r:null,error:null}}catch(e){if(e instanceof a$2&&e.code==="project.workspace.unlinked")return {workspacePath:null,error:null};if(e instanceof a$2)return {workspacePath:null,error:e};throw e}}async function fo(t,e){try{let{syncWorkspaceConsumerArtifacts:r}=await import('./workspace-onboarding-7V7EH3RH.js');return await r(t,{silent:e?.silent})}catch(r){if(e?.strict)throw r;return e?.silent||(console.log(s.yellow(`\u26A0\uFE0F  Workspace consumer sync skipped: ${r.message}`)),console.log(s.gray("   Retry: npx workspai workspace agent-sync --write --refresh-context --preset enterprise"))),null}}async function Vf(t,e=process.cwd(),r=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$3(r))return {detected:false};let n=p$3(e,r);for(let a of n){if(!await M__default.pathExists(a))continue;let i=a.toLowerCase();if(i.endsWith("rapidkit.cmd")||i.endsWith("rapidkit.exe"))return {detected:true,candidatePath:a,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function Jf(t){let e=t;for(;;){let r=b.join(e,".rapidkit-workspace"),o=b.join(e,".rapidkit","workspace.json");if(!$.existsSync(r)&&$.existsSync(o))return e;let n=b.dirname(e);if(n===e)break;e=n;}return null}var uu={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function Kf(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function uo(t,e){let r=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return r?r[1]==="true":uu[e]}function ru(t){let e=t??"";return {mode:Kf(e),dependency_sharing_mode:mu(e),rules:{enforce_workspace_marker:uo(e,"enforce_workspace_marker"),enforce_toolchain_lock:uo(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:uo(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:uo(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:uo(e,"require_mirror_lock_for_offline")}}}function ou(t,e,r){let o=`${e}: ${r}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`${o}
 rules:`):`${t.endsWith(`
 `)?t:`${t}
 `}${o}
-`}function _f(t,e,r){let o=`  ${e}: ${r?"true":"false"}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]+${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`rules:
+`}function Hf(t,e,r){let o=`  ${e}: ${r?"true":"false"}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]+${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,o);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`rules:
 ${o}`):`${t.endsWith(`
 `)?t:`${t}
 `}rules:
 ${o}
-`}function If(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx workspai bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx workspai init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
-`)}async function Hd(t){for(let e of t$1(t,"policies.yml"))if(await M__default.pathExists(e))return O.promises.readFile(e,"utf-8");return If()}async function Of(t,e){let r=q$1(t,"policies.yml");await M__default.ensureDir(P.dirname(r));let o=e.endsWith(`
+`}function Bf(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx workspai bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx workspai init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
+`)}async function nu(t){for(let e of t$1(t,"policies.yml"))if(await M__default.pathExists(e))return $.promises.readFile(e,"utf-8");return Bf()}async function Uf(t,e){let r=q$1(t,"policies.yml");await M__default.ensureDir(b.dirname(r));let o=e.endsWith(`
 `)?e:`${e}
-`;await O.promises.writeFile(r,o,"utf-8");}function Nf(t){let e=t.trim().toLowerCase();return e==="true"||e==="1"||e==="on"?true:e==="false"||e==="0"||e==="off"?false:null}function tu(t){if(!t)return "isolated";let r=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated"?r:"isolated"}function ru(t){if(!t)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let e=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!e)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let r=e[1].toLowerCase();return r==="isolated"||r==="shared-runtime-caches"||r==="shared-node-deps"?{mode:r,status:"passed",message:`dependency_sharing_mode is valid: ${r}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${r}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function ou(t,e){let r=Ie(t),o=r?t$1(r,"policies.yml").find(c=>O.existsSync(c)):null,n="isolated";if(o&&await M__default.pathExists(o))try{let c=await O.promises.readFile(o,"utf-8"),l=ru(c);if(l.status==="failed")return console.log(s.red(`\u274C ${l.message}`)),{ok:false,code:1};n=l.mode;}catch{return console.log(s.red("\u274C Failed to read workspace policy file (.workspai/policies.yml).")),{ok:false,code:1}}let a=process.env.RAPIDKIT_DEP_SHARING_MODE,i=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=n,r&&(process.env.RAPIDKIT_WORKSPACE_PATH=r);try{return {ok:true,value:await e()}}finally{typeof a>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=a,typeof i>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=i;}}async function Ae(t,e,r,o={}){let{buildPackageRunnerSubprocessEnv:n,resolvePackageRunnerInvocation:a}=await import('./platform-capabilities-DB4BZPTD.js'),i=$f(t,e,r),c=i?{command:process.execPath,prefixArgs:["-e",i]}:a(t),l=c.command,p=i?c.prefixArgs:[...c.prefixArgs,...e],g=n();if(i){Cr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.nodeEval=${JSON.stringify({cwd:r,scriptBytes:i.length})}
-`);try{return Zg.runInThisContext(i,{filename:P.join(r,"package.json#script")}),0}catch(d){return process.stderr.write(`${d instanceof Error?d.stack||d.message:String(d)}
-`),1}}let u=process.argv.includes("--json")||process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"||process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT==="1",f=t==="npm"&&(e[0]==="run"||e[0]==="run-script"||e[0]==="install"),k=process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"&&f||!u&&f,S=()=>{let d=g.npm_config_cache;if(!d)return "";let m=P.join(d,"_logs");try{let y=O.readdirSync(m).filter(v=>v.endsWith(".log")).map(v=>{let x=P.join(m,v);return {filePath:x,mtimeMs:O.statSync(x).mtimeMs}}).sort((v,x)=>x.mtimeMs-v.mtimeMs)[0]?.filePath;return y?O.readFileSync(y,"utf-8").split(/\r?\n/).map(v=>v.trim()).filter(v=>/(?:^|\s)(?:npm\s+)?(?:error|verbose\s+(?:stack|cwd|os|node|npm|exit|code))\b/i.test(v)).slice(0,12).join(`
-`):""}catch{return ""}},A=Number.parseInt(process.env.RAPIDKIT_CHILD_COMMAND_TIMEOUT_MS||"",10),E=o.timeoutMs&&o.timeoutMs>0?o.timeoutMs:Number.isFinite(A)&&A>0?A:void 0;return await new Promise(d=>{let m=[],w=[],y=false,h=null,v=null,x=()=>{try{v?.stdout?.destroy();}catch{}try{v?.stderr?.destroy();}catch{}try{v?.stdin?.destroy();}catch{}try{v?.removeAllListeners("close"),v?.removeAllListeners("error"),v?.unref();}catch{}};Cr()&&process.stderr.write(`[workspai-cli] runCommandInCwd=${JSON.stringify({executable:l,args:p,cwd:r,directNodeEvalScript:i!==null,npmEnv:Object.fromEntries(Object.entries(g).filter(([C])=>["npm_config_if_present","npm_config_ignore_scripts","npm_config_loglevel","npm_config_silent","npm_config_json","npm_lifecycle_event","npm_lifecycle_script"].includes(C)))})}
-`);let R=b$2()&&/\.(?:cmd|bat)$/i.test(l);v=spawn(l,p,{stdio:k?"inherit":["ignore","pipe","pipe"],cwd:r,shell:R,env:g,detached:!b$2()}),E&&E>0&&(h=setTimeout(()=>{if(!y){if(y=true,!b$2()&&v.pid)try{process.kill(-v.pid,"SIGTERM");}catch{v.kill("SIGTERM");}else v.kill("SIGTERM");x(),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`RapidKit command timed out after ${E}ms: ${l} ${p.join(" ")}
-`),d(124);}},E)),k||(v.stdout?.on("data",C=>{m.push(C);}),v.stderr?.on("data",C=>{w.push(C);})),v.on("close",C=>{if(y)return;y=true,h&&clearTimeout(h);let $=Buffer.concat(m),j=Buffer.concat(w),_=!k&&C&&C!==0&&$.length===0&&j.length===0&&t==="npm"?S():"";Cr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.close=${JSON.stringify({code:C,stdoutBytes:$.length,stderrBytes:j.length,npmFailureExcerptBytes:_.length})}
-`),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&($.length>0&&process.stdout.write($),j.length>0?process.stderr.write(j):_&&process.stderr.write(`${_}
-`)),d(C??1);}),v.on("error",C=>{y||(y=true,h&&clearTimeout(h),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`Workspai could not execute ${l}: ${C.message}. Install the required runtime or tool and ensure it is available on PATH.
-`),d(1));});})}function $f(t,e,r){if(t!=="npm")return null;let o=e[0];if(o!=="run"&&o!=="run-script")return null;let n=e.find((i,c)=>c>0&&!i.startsWith("-"));if(!n)return null;let a=P.join(r,"package.json");if(!O.existsSync(a))return null;try{let c=JSON.parse(O.readFileSync(a,"utf8")).scripts?.[n];return typeof c!="string"?null:Tf(c)}catch{return null}}function Tf(t){let e=t.trim(),r=e.match(/^node\s+(?:-e|--eval)\s+"((?:\\.|[^"\\])*)"$/);if(r)return r[1].replace(/\\"/g,'"').replace(/\\\\/g,"\\");let o=e.match(/^node\s+(?:-e|--eval)\s+'((?:\\.|[^'\\])*)'$/);return o?o[1].replace(/\\'/g,"'").replace(/\\\\/g,"\\"):null}async function Wn(t,e){await M__default.outputFile(t,`${JSON.stringify(e,null,2)}
-`,"utf-8");}function Mf(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function Wf(t,e,r){let o=Mt(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":P.basename(e),n=Mf(r||o)||"imported-project",a=0;for(;;){let i=a===0?n:a===1?`${n}-imported`:`${n}-imported-${a}`,c=P.join(t,i);if(!await M__default.pathExists(c))return c;a+=1;}}async function xs(t,e,r){let o=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?P.resolve(e.workspace):null,a=n?{workspacePath:n,error:null}:Zd(process.cwd()),i=a.workspacePath,c=false,l=false,p=false;if(a.error)return e.json?console.log(JSON.stringify(c$1({operation:"import",code:a.error.code,message:a.error.message,context:a.error.context}),null,2)):console.log(s.red(`\u274C ${a.error.message}`)),1;if(n){if(!ot(n)){let f=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:f},null,2)):console.log(s.red(`\u274C ${f}`)),1}}else (!i||!ot(i))&&(i=p$2(),c=true,p=true);if(!i||!ot(i)&&!p){let f="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:f},null,2)):(console.log(s.red(`\u274C ${f}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let g="npx workspai project workspace status --json",u;try{let f=await Wf(i,t,e.name);if(u=await Mn(i,{ownedDestination:f,ownedWorkspace:p?i:void 0}),p){let k=await Ws({silent:e.json});i=k.workspacePath,l=k.created;}let b=await bd({workspacePath:i,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0,projectGrounding:e.projectGrounding});b.path!==f&&u.registerCompensation(()=>M__default.remove(b.path));try{if(r?.syncWorkspaceProjects)await r.syncWorkspaceProjects(i);else {if(o)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:k,registerWorkspaceStrict:S}=await import('./workspace-PAXTJCMH.js'),{resolveWorkspaceRegistrationName:A}=await import('./workspace-marker-7U3NYRPJ.js');await S(i,await A(i)),await k(i,b.name,b.path);}await u.commit(),await po(i,{silent:e.json});}catch(k){try{await Sr(u,k);}catch(S){if(S!==k)throw S}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${k instanceof Error?k.message:String(k)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:i,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?l:false,projectWorkspaceCommand:g,commandsResolveWorkspaceFromProject:true,plan:b.ingestionPlan,importedProject:b},null,2)),0;if(c&&console.log(s.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${i}`)),l&&console.log(s.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),console.log(s.green(`\u2714 Imported project: ${b.name}`)),console.log(s.gray(`   Workspace: ${i}`)),console.log(s.gray(`   Destination: ${b.path}`)),console.log(s.gray(`   Stack: ${b.stack} (${b.confidence})`)),console.log(s.gray(`   Source: ${e.git===true||Mt(t)?"git-url":"local-folder"}`)),!b.profileCompatibility.ok){let k=s$1(b.profileCompatibility);console.log(s.yellow(`   Profile warning: ${b.profileCompatibility.message}`)),k&&console.log(s.gray(`   ${k}`));}return console.log(s.gray("   Workspai commands now resolve this workspace directly from the imported project.")),console.log(s.gray(`   Check: ${g}`)),0}catch(f){if(u)try{await Sr(u,f);}catch(k){k!==f&&(f=k);}let b=f instanceof Error?f.message:String(f);return e.json?console.log(JSON.stringify({error:b},null,2)):console.log(s.red(`\u274C Import failed: ${b}`)),1}}async function nu(t,e,r){let o,n=(w,y)=>{o=w,c$7({blockId:w,status:"running",message:y,component:"adopt"});},a=(w,y)=>{c$7({blockId:w,status:"succeeded",message:y,component:"adopt"}),o===w&&(o=void 0);},i=(w,y)=>{c$7({blockId:w,status:"skipped",message:y,component:"adopt"});},c=w=>{o&&(c$7({blockId:o,status:"failed",message:w,component:"adopt"}),o=void 0);};n("adopt.resolve","Resolving project and workspace");let l=P.resolve(t||process.cwd()),p=e.workspace?P.resolve(e.workspace):null,g=p?{workspacePath:p,error:null}:Zd(process.cwd()),u=g.workspacePath,f=false,b=false,k=false;if(g.error)return c(g.error.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:g.error.code,message:g.error.message,context:g.error.context}),null,2)):console.log(s.red(`\u274C ${g.error.message}`)),1;if(p){if(!ot(p)){let w=`Workspace path is not a valid Workspai workspace: ${p}`;return c(w),e.json?console.log(JSON.stringify({error:w},null,2)):console.log(s.red(`\u274C ${w}`)),1}}else (!u||!ot(u))&&(u=p$2(),f=true,k=e.dryRun!==true);let S=f&&u!==null&&(e.dryRun===true||k);if(!u||!ot(u)&&!S){let w="Not inside a Workspai workspace";return c(w),e.json?console.log(JSON.stringify({error:w},null,2)):(console.log(s.red(`\u274C ${w}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let A=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),E,d=null,m=null;try{if(e.dryRun!==true&&(E=await Mn(u,{projectPath:l,ownedWorkspace:k?u:void 0}),k)){let C=await Ws({silent:e.json});u=C.workspacePath,b=C.created;}a("adopt.resolve","Project and workspace resolved"),n("adopt.detect","Detecting architecture and adoption effects");let w=await cs(u,l),y=await ls({workspacePath:u,source:l,name:e.name,dryRun:e.dryRun===true,projectGrounding:e.projectGrounding,rollbackSnapshot:w});a("adopt.detect","Architecture and adoption effects detected");let h="npx workspai project workspace status --json",v=e.dryRun===true?b$4({startPath:l}):null,x=e.dryRun!==true||v!==null&&P.resolve(v.workspacePath)===P.resolve(u)&&(!v.projectPath||P.resolve(v.projectPath)===l);if(e.dryRun!==true){n("adopt.link","Linking project to workspace");try{if(r?.registerWorkspace||r?.registerProjectInWorkspace||r?.syncWorkspaceProjects)r.registerWorkspace&&await r.registerWorkspace(u,P.basename(u)),r.registerProjectInWorkspace&&await r.registerProjectInWorkspace(u,y.name,y.path),r.syncWorkspaceProjects&&await r.syncWorkspaceProjects(u);else {let{registerProjectInWorkspaceStrict:$,registerWorkspaceStrict:j}=await import('./workspace-PAXTJCMH.js'),{resolveWorkspaceRegistrationName:_}=await import('./workspace-marker-7U3NYRPJ.js');if(await j(u,await _(u)),await $(u,y.name,y.path),A)throw new Error("forced sync failure for command-level adopt rollback test")}if(a("adopt.link","Project linked to workspace"),n("adopt.publish","Sealing workspace intelligence"),d=await po(u,{silent:e.json,strict:true}),!d?.freshnessSealed)throw new Error("Workspace consumer artifacts were generated without a freshness seal.");a("adopt.publish","Workspace intelligence freshness sealed"),n("adopt.ground","Building the project agent entry");let{buildAgentBootstrapReceipt:C}=await import('./project-agent-entry-Z3OY3S7T.js');if(m=await C({startPath:l,forAgent:"generic",validateLiveInputs:true}),m.status==="blocked"){let $=m.checks.filter(j=>j.status==="failed").map(j=>`${j.id}: ${j.message}`).join("; ");throw new Error(`Adopted project did not produce a usable agent-grounding route${$?` (${$})`:"; inspect the bootstrap checks."}`)}await E?.commit(),a("adopt.ground","Project agent entry is ready");}catch(C){if(E)try{await Sr(E,C);}catch($){if($!==C)throw $}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${C instanceof Error?C.message:String(C)}`)}}else i("adopt.link","Dry run: workspace link not written"),i("adopt.publish","Dry run: workspace intelligence not published"),i("adopt.ground","Dry run: project agent entry not written");if(e.json)return console.log(JSON.stringify({workspacePath:u,workspaceResolution:f?"default-auto":p?"explicit":"nearest",defaultWorkspaceCreated:f?b:false,wouldCreateDefaultWorkspace:f&&e.dryRun===true?!ot(u):false,projectWorkspaceCommand:h,commandsResolveWorkspaceFromProject:x,dryRun:e.dryRun===true,plan:y.ingestionPlan,adoptedProject:y,consumerArtifacts:e.dryRun===true||!d?null:{freshnessSealed:d.freshnessSealed,reconciledAfterGrounding:d.reconciledAfterGrounding,warnings:d.warnings},agentBootstrap:m},null,2)),0;f&&console.log(s.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${u}`)),b&&e.dryRun!==true&&console.log(s.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),e.dryRun===true&&(console.log(s.yellow("\u2139 Dry run: no adoption files were written.")),console.log(s.gray("   Planned effects: project metadata + workspace registration + model, graph, and agent-grounding sync.")),y.effects.repositoryControlFiles.length>0&&console.log(s.gray(`   Repository controls may be reconciled: ${y.effects.repositoryControlFiles.map(C=>C.path).join(", ")}.`))),console.log(s.green(`\u2714 Adopted project: ${y.name}`)),console.log(s.gray(`   Workspace: ${u}`)),console.log(s.gray(`   Project: ${y.path}`)),console.log(s.gray("   Mode: linked (source was not moved or copied)"));let R=y.stack==="unknown"?y.frameworkDisplayName||y.runtime:y.stack;if(console.log(s.gray(`   Stack: ${R} (${y.confidence})`)),!y.profileCompatibility.ok){let C=s$1(y.profileCompatibility);console.log(s.yellow(`   Profile warning: ${y.profileCompatibility.message}`)),C&&console.log(s.gray(`   ${C}`));}return console.log(s.gray(`   Report: ${y.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(s.gray("   Workspai commands now resolve this workspace directly from the project.")),console.log(s.gray(`   Consumer evidence: ${d?.freshnessSealed?"freshness sealed":"not sealed"}${d?.reconciledAfterGrounding?" after grounding reconciliation":""}.`)),console.log(s.gray(`   Agent grounding: ${m?.status??"unknown"}; project environment: ${m?.readiness.projectEnvironment??"unknown"}; release: ${m?.readiness.release??"not-verified"}.`)),console.log(s.gray(`   Check: ${h}`)),console.log(s.gray("   Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(w){if(E)try{await Sr(E,w);}catch(h){h!==w&&(w=h);}let y=w instanceof Error?w.message:String(w);return c(y),e.json?console.log(JSON.stringify({error:y},null,2)):console.log(s.red(`\u274C Adopt failed: ${y}`)),1}}async function _s(t){let e=new Set(["python-only","polyglot","enterprise"]),r=Df(),o="minimal",n=false;try{let l=t$1(t,"workspace.json").find(g=>O.existsSync(g))??q$1(t,"workspace.json"),p=JSON.parse(await O.promises.readFile(l,"utf-8"));o=p.profile??"minimal",n=p.bootstrap_note==="python-engine-skipped"||p.engine?.python_core?.status==="skipped";}catch{o="minimal";}if(!await(async()=>{if(m$1(o)&&o!=="minimal")return  false;if(!n&&e.has(o))return  true;let l$1=await Is(t);if(l$1.length===0)return  false;for(let p of l$1){let g=j$2(p),u=g?.module_support,f=typeof g?.kit_name=="string"?g.kit_name:typeof g?.kit=="string"?g.kit:void 0,b=f?a$3(f):null;if(n||o==="minimal"){if(b?.workspacePythonEngine==="required")return  true;continue}if(!(k$2(g,p)||m$2(g,p)||n$1(g,p))&&u!==false)return o$2(g,p)||l(g,p),true}return  false})())return 0;let i="poetry";try{let{readWorkspaceMarker:l}=await import('./workspace-marker-7U3NYRPJ.js'),g=(await l(t))?.metadata?.npm?.installMethod;(g==="poetry"||g==="venv"||g==="pipx"||g==="pip")&&(i=g);}catch{}let c=async()=>{let l=af(t),p=await pf(t);if(p!==0)return p;let g=f$3("DEV_PATH"),f=(g?await M__default.pathExists(g):false)&&g?["-m","pip","install",g,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await Ae(l,f,t,{timeoutMs:r})};if(i==="venv"){let l=await c();if(l!==0)return l}else if(i==="poetry"){let l=P.join(t,"pyproject.toml"),p=false;try{p=(await O.promises.readFile(l,"utf-8")).includes("rapidkit-core");}catch{p=false;}if(p){let g=await c();if(g!==0)return g}else {let g=await Ae("poetry",["install","--no-root"],t,{timeoutMs:r});if(g!==0)return g;let u=await Ae("poetry",["add","rapidkit-core"],t,{timeoutMs:r});if(u!==0)return u}}else return 0;try{let{writeWorkspaceLauncher:l}=await import('./create-7UENFCJK.js');await l(t,i==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:l}=await import('./workspace-python-engine-state-VCOLSEWV.js');await l(t,{installMethod:i==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function Df(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function Is(t){let e=[],r=new Set,o=[t];for(;o.length>0;){let n=o.pop();if(!n||r.has(n))continue;r.add(n);let a=[];try{a=await O.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){if(!i.isDirectory()||i.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(i.name))continue;let c=P.join(n,i.name);if((await Promise.all([...u(c,"context.json"),...u(c,"project.json")].map(p=>M__default.pathExists(p)))).some(Boolean)){e.push(c);continue}o.push(c);}}return e}function Lf(t){return o$6(t)}async function Ws(t={}){let e=p$2(),r=P.basename(e),o=ot(e);if(!o){let{createProject:n}=await import('./create-7UENFCJK.js'),a=process.env.WORKSPAI_LOG_FORMAT,i=console.log,c$1=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(r,{parentDirectory:P.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await c(),suppressReceipt:true});}finally{t.silent&&(console.log=i,console.warn=c$1,a===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=a);}}return {workspacePath:e,created:!o}}async function ws(t){let r=await Ye("go",{runCommandInCwd:Ae,runCoreRapidkit:e$2}).initProject(t);return se(r)}function se(t){return t.message&&console.log(s.red(`\u274C ${t.message}`)),t.exitCode}async function qt(t,e){let r=Ye("node",{runCommandInCwd:Ae,runCoreRapidkit:e$2});if(t==="init"){let n=await r.initProject(e);return se(n)}if(t==="dev"){let n=await r.runDev(e);return se(n)}if(t==="test"){let n=await r.runTest(e);return se(n)}if(t==="build"){let n=await r.runBuild(e);return se(n)}if(t==="lint"){let n=await r.runLint?.(e);return se(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return se(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return se(o)}async function Ct(t,e){let r=Ye("java",{runCommandInCwd:Ae,runCoreRapidkit:e$2});if(t==="init"){let n=await r.initProject(e);return se(n)}if(t==="dev"){let n=await r.runDev(e);return se(n)}if(t==="test"){let n=await r.runTest(e);return se(n)}if(t==="build"){let n=await r.runBuild(e);return se(n)}if(t==="lint"){let n=await r.runLint?.(e);return se(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return se(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return se(o)}function ys(t,e,r){let o=r.filter(n=>n.status==="failed").map(n=>{let a=n.id||"check";return n.message?`${a}: ${n.message}`:a}).slice(0,12);return f$7(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:o,runId:e$e()})}async function Ff(t$2,e=Os){if(t$2.includes("--help")||t$2.includes("-h")||t$2.includes("help"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let r=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof r>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let a=function(I){if(!I)return null;let J=I.trim().toLowerCase();return J==="minimal"||J==="java-only"||J==="go-only"||J==="dotnet-only"||J==="python-only"||J==="node-only"||J==="polyglot"||J==="enterprise"?J:null},i=function(I){let Te=I.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Me=(Re,Xe)=>{let pt=I.match(new RegExp(`^\\s*${Re}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return pt?pt[1].toLowerCase()==="true":Xe};return {mode:Te,dependency_sharing_mode:tu(I),rules:{enforce_workspace_marker:Me("enforce_workspace_marker",true),enforce_toolchain_lock:Me("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Me("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Me("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Me("require_mirror_lock_for_offline",true)}}};let c=["init"],l$1,p=false,g=false,u=false,f=false;for(let I=1;I<t$2.length;I+=1){let J=t$2[I];if(J==="--ci"){p=true;continue}if(J==="--offline"){g=true;continue}if(J==="--json"){u=true;continue}if(J==="--compliance-only"){f=true;continue}if(J==="--profile"){let K=t$2[I+1];if(!K||K.startsWith("-"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;l$1=K,I+=1;continue}if(J.startsWith("--profile=")){l$1=J.slice(10);continue}c.push(J);}let b$1=a(l$1);if(l$1&&!b$1)return console.log(s.red(`Invalid profile: ${l$1}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let k=process.cwd(),S=c.slice(1).filter(I=>!I.startsWith("-"));if(S.length>0){let I=P.resolve(k,S[0]),J=j$2(I),K=O.existsSync(I)?await zt(I):"unknown";if(!ot(I)&&(k$2(J,I)||m$2(J,I)||n$1(J,I)||l(J,I)||o$2(J,I)||K!=="unknown"))return await e(c)}let A=P.join(k,".rapidkit-workspace"),E=P.join(k,".rapidkit","workspace.json"),d;!O.existsSync(A)&&O.existsSync(E)?d=k:(d=Ie(k),d||(d=Rf(k)));let m=[],w=null,y=null;if(d)try{let I=t$1(d,"workspace.json").find(Te=>O.existsSync(Te))??q$1(d,"workspace.json"),J=await O.promises.readFile(I,"utf-8"),K=JSON.parse(J);y=a(K.profile);}catch{y=null;}let h=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],v={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only   \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot    \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},x=b$1;if(!!d&&!b$1&&!p&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let I=y||"minimal",{chosenProfile:J}=await b([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${I})`,choices:h.map(K=>({name:K===I?`${v[K]}   \u2190 current`:v[K],value:K})),default:h.indexOf(I)}]);x=J;}let C=x||y||"minimal";if(d&&!f)try{let J=C==="python-only"||C==="polyglot"||C==="enterprise"?"poetry":"venv",K;try{let Xe=(await O.promises.readFile(P.join(d,".python-version"),"utf-8")).trim();Xe&&(K=Xe);}catch{}let{syncWorkspaceFoundationFiles:Te}=await import('./create-7UENFCJK.js'),Me=await Te(d,{workspaceName:P.basename(d),installMethod:J,pythonVersion:K,profile:C,writeMarker:true,writeGitignore:true,onlyIfMissing:true});m.push({id:"workspace.foundation.sync",status:Me.length>0?"passed":"skipped",message:Me.length>0?`Workspace foundation synchronized: ${Me.join(", ")}`:"Workspace foundation files are already up to date."});}catch(I){m.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${I.message}`});}else d&&m.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(d&&!f&&x)try{let I=q$1(d,"workspace.json"),J=await O.promises.readFile(I,"utf-8"),K=JSON.parse(J);if(K.profile=x,l$6.has(x)){delete K.bootstrap_note;let Me=K.engine&&typeof K.engine=="object"?K.engine:void 0;Me&&delete Me.python_core;}await M__default.ensureDir(P.dirname(I)),await O.promises.writeFile(I,JSON.stringify(K,null,2)+`
-`,"utf-8");let{syncWorkspaceContract:Te}=await import('./workspace-contract-VWPOIYHJ.js');await Te({workspacePath:d}),m.push({id:"workspace.profile.sync",status:"passed",message:`Workspace profile synchronized to ${x} across canonical artifacts.`});}catch(I){m.push({id:"workspace.profile.sync",status:"failed",message:`Failed to synchronize workspace profile across canonical artifacts: ${I instanceof Error?I.message:String(I)}`});}let $={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},j=null;if(d)try{let I=t$1(d,"policies.yml").find(K=>O.existsSync(K));if(!I)throw new Error("policy file missing");let J=await O.promises.readFile(I,"utf-8");j=J,$=i(J);}catch{m.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else m.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(d){let I=ru(j);$.dependency_sharing_mode=I.mode,m.push({id:"policy.schema.dependency_sharing_mode",status:I.status,message:I.message}),m.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:$.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":$.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let J=O.existsSync(P.join(d,".workspai-workspace"))||O.existsSync(P.join(d,".rapidkit-workspace"));m.push({id:"policy.enforce_workspace_marker",status:!$.rules.enforce_workspace_marker||J?"passed":"failed",message:!$.rules.enforce_workspace_marker||J?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let K=t$1(d,"toolchain.lock").some(We=>O.existsSync(We));m.push({id:"policy.enforce_toolchain_lock",status:!$.rules.enforce_toolchain_lock||K?"passed":"failed",message:!$.rules.enforce_toolchain_lock||K?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Te=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||t$1(d,"trusted-sources.lock").some(We=>O.existsSync(We));m.push({id:"policy.disallow_untrusted_tool_sources",status:!$.rules.disallow_untrusted_tool_sources||Te?"passed":"failed",message:!$.rules.disallow_untrusted_tool_sources||Te?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let Me=t$1(d,"compatibility-matrix.json").find(We=>O.existsSync(We))??q$1(d,"compatibility-matrix.json"),Re=O.existsSync(Me),Xe=$.rules.enforce_compatibility_matrix;if(m.push({id:"policy.enforce_compatibility_matrix",status:!Xe||Re?"passed":"failed",message:!Xe||Re?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),Re)try{let We=await O.promises.readFile(Me,"utf-8"),bt=JSON.parse(We),Ls=!!bt&&typeof bt=="object";m.push({id:"compatibility.matrix.parse",status:Ls?"passed":"failed",message:Ls?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{m.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let pt=t$1(d,"mirror-config.json").find(We=>O.existsSync(We))??q$1(d,"mirror-config.json"),Ar=t$1(d,"mirror.lock").find(We=>O.existsSync(We))??q$1(d,"mirror.lock"),Ln=O.existsSync(pt),Fn=O.existsSync(Ar),Ds={};if(Ln)try{Ds=JSON.parse(await O.promises.readFile(pt,"utf-8")),m.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{m.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(f)m.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let We=await is(d,{ciMode:p,offlineMode:g});m.push(...We.checks.map(bt=>({id:bt.id,status:bt.status,message:bt.message}))),w=We.details,We.details.lockWritten&&(Fn=true);}if(g){let We=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||Ds.enabled===true;m.push({id:"offline.mirror.enabled",status:We?"passed":"failed",message:We?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let bt=$.rules.require_mirror_lock_for_offline;m.push({id:"offline.mirror.lock",status:!bt||Fn?"passed":"failed",message:!bt||Fn?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else m.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let uo=n$2({profile:C,runtimes:await r$1(d),mode:$.mode});uo.profile!=="enterprise"?m.push({id:uo.checkId,status:uo.status,message:uo.message}):(m.push({id:"profile.enterprise.ci",status:p?"passed":f?"skipped":"failed",message:p?"enterprise profile running with --ci.":f?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),m.push({id:"profile.enterprise.compatibility-matrix",status:Re?"passed":"failed",message:Re?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),m.push({id:"profile.enterprise.mirror-config",status:Ln?"passed":"failed",message:Ln?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}p&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),g&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let N=m.some(I=>I.id.startsWith("policy.schema.")&&I.status==="failed")||$.mode==="strict"&&m.some(I=>I.status==="failed"),L=q$1(d||k,"reports"),q=new Date().toISOString().replace(/[:.]/g,"-"),H=P.join(L,`bootstrap-compliance-${q}.json`),ce=P.join(L,"bootstrap-compliance.latest.json"),le={schemaVersion:s$2.bootstrapCompliance.schemaVersion,command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:d,profile:C,options:{ci:p,offline:g,strict:$.mode==="strict",complianceOnly:f},policyMode:$.mode,policyRules:$.rules,mirrorLifecycle:w,checks:m},ae=async I=>{b$p(`.workspai/reports/${P.basename(H)}`,I),b$p(t.bootstrapCompliance,I),await M__default.ensureDir(L),await Wn(H,I),await Wn(ce,I);};if(N){let I=ys({...le,result:"blocked",initExitCode:null},1,m);return await ae(I),u?process.stdout.write(`${JSON.stringify(I,null,2)}
-`):(console.log(s.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(s.gray(`Compliance report: ${H}`))),1}if(u&&C==="enterprise"&&!p&&!f){let I=ys({...le,result:"blocked",initExitCode:null,complianceOnly:false,bootstrapRuntimeSkipped:{reason:"enterprise JSON bootstrap requires --ci for deterministic non-interactive execution.",nextAction:"npx workspai bootstrap --profile enterprise --ci --json"}},1,m);return await ae(I),process.stdout.write(`${JSON.stringify(I,null,2)}
-`),1}let qe=async I=>{let J=process.stdout.write.bind(process.stdout),K=process.stderr.write.bind(process.stderr),Te=[],Me=[];process.stdout.write=((Re,Xe,pt)=>{let Ar=typeof Xe=="function"?Xe:typeof pt=="function"?pt:void 0;return Te.push(typeof Re=="string"?Re:Re instanceof Uint8Array?Buffer.from(Re).toString("utf8"):String(Re)),Ar?.(),true}),process.stderr.write=((Re,Xe,pt)=>{let Ar=typeof Xe=="function"?Xe:typeof pt=="function"?pt:void 0;return Me.push(typeof Re=="string"?Re:Re instanceof Uint8Array?Buffer.from(Re).toString("utf8"):String(Re)),Ar?.(),true});try{return {exitCode:await I(),stdout:Te.join(""),stderr:Me.join("")}}finally{process.stdout.write=J,process.stderr.write=K;}},je=I=>{let J=I.split(/\r?\n/).map(K=>K.trim()).filter(Boolean);return {bytes:Buffer.byteLength(I),excerpt:J.slice(0,12)}},D=0,G;if(!f)if(u){let I=await qe(()=>e(c));D=I.exitCode,G={captured:true,stdout:je(I.stdout),stderr:je(I.stderr)};}else D=await e(c);let te=m.filter(I=>I.status==="failed").length,z=D!==0?"failed":te>0?"ok_with_warnings":"ok",ee=D!==0?D:te>0?1:0,Y=ys({...le,result:z,initExitCode:D,complianceOnly:f,...G?{initOutput:G}:{}},ee,m);if(await ae(Y),d&&!f&&D===0)try{let{syncWorkspaceProjects:I}=await import('./workspace-PAXTJCMH.js');await I(d,u),await po(d,{silent:u});}catch{}if(u)process.stdout.write(`${JSON.stringify(Y,null,2)}
-`);else {let I=m.filter(J=>J.status==="failed").length;I>0&&console.log(s.yellow(`\u26A0\uFE0F  Bootstrap completed with ${I} policy/profile warnings.`)),console.log(s.gray(`Compliance report: ${H}`));}return ee}finally{typeof r>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=r;}}async function Gf(t,e=Ae){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),0;let r=(t[1]||"").toLowerCase(),o=t.includes("--json"),n=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!r||!["python","node","go","java","dotnet","rust","php"].includes(r))return o?process.stdout.write(`${JSON.stringify({command:"setup",result:"error",error:"Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]"},null,2)}
-`):console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),1;let a=async(b,k)=>{if(b==="node"){if(!O.existsSync(P.join(k,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let A=O.existsSync(P.join(k,"pnpm-lock.yaml")),E=O.existsSync(P.join(k,"yarn.lock"));return A?{exitCode:await e("pnpm",["install","--lockfile-only","--ignore-scripts"],k)}:E?{exitCode:await e("yarn",["install","--ignore-scripts"],k)}:{exitCode:await e("npm",["install","--package-lock-only","--ignore-scripts"],k)}}if(b==="go")return O.existsSync(P.join(k,"go.mod"))?{exitCode:await e("go",["mod","download"],k)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."};if(b==="java"){let S=O.existsSync(P.join(k,"pom.xml")),A=O.existsSync(P.join(k,"build.gradle"))||O.existsSync(P.join(k,"build.gradle.kts")),E=P.join(k,process.platform==="win32"?"gradlew.bat":"gradlew"),d=O.existsSync(E);return !S&&!A?{exitCode:0,message:"Java warm-up skipped: pom.xml or build.gradle not found in current directory."}:S?{exitCode:await e("mvn",["-B","-q","-DskipTests","dependency:go-offline"],k)}:{exitCode:await e(d?E:"gradle",["--no-daemon","dependencies"],k)}}return b==="dotnet"?(()=>{let A=[{dir:k,depth:0}],E=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;A.length>0;){let d=A.shift();if(!d||d.depth>3)continue;let m=[];try{m=O.readdirSync(d.dir,{withFileTypes:true});}catch{continue}for(let w of m)if(w.isFile()){let y=w.name.toLowerCase();if(y.endsWith(".sln")||y.endsWith(".csproj"))return  true}else w.isDirectory()&&!E.has(w.name)&&A.push({dir:P.join(d.dir,w.name),depth:d.depth+1});}return  false})()?{exitCode:await e("dotnet",["restore"],k)}:{exitCode:0,message:".NET warm-up skipped: .sln or *.csproj not found in current project tree."}:b==="rust"?O.existsSync(P.join(k,"Cargo.toml"))?{exitCode:await e("cargo",["fetch"],k)}:{exitCode:0,message:"Rust warm-up skipped: Cargo.toml not found in current directory."}:b==="php"?O.existsSync(P.join(k,"composer.json"))?{exitCode:await e("composer",["install","--no-interaction","--no-scripts"],k)}:{exitCode:0,message:"PHP warm-up skipped: composer.json not found in current directory."}:{exitCode:0,message:"Dependency warm-up is not available for this runtime."}};if(o){let b=process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT;process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT="1";try{let S=await Ye(r,{runCommandInCwd:e,runCoreRapidkit:async(w,y)=>(await g$9(w,{...y,cwd:void 0})).exitCode}).checkPrereqs(),A=Ie(process.cwd()),E=A||process.cwd(),d=null;if(r==="node"&&S.exitCode===0&&(d=process.version),A&&d){let w=t$1(A,"toolchain.lock").find(v=>O.existsSync(v))??q$1(A,"toolchain.lock"),y=q$1(A,"toolchain.lock"),h={};try{h=JSON.parse(await O.promises.readFile(w,"utf-8"));}catch{}(!h.runtime||typeof h.runtime!="object")&&(h.runtime={}),h.runtime[r]={version:d,detectedAt:new Date().toISOString()},await M__default.ensureDir(P.dirname(y)),await O.promises.writeFile(y,JSON.stringify(h,null,2)+`
-`,"utf-8");}let m={requested:n,status:"not-requested",exitCode:null,targets:0,messages:[]};if(n&&S.exitCode===0){let w=[E];if(r==="java"&&A){let R=(await Is(A)).filter(C=>{let $=j$2(C);return m$2($,C)});R.length>0&&(w=R);}let y=[];for(let x of w)y.push(await a(r,x));let h=y.filter(x=>x.exitCode!==0),v=y.filter(x=>x.exitCode===0&&!/skipped/i.test(x.message||""));m.status=h.length>0?"failed":v.length>0?"passed":"skipped",m.exitCode=h[0]?.exitCode??0,m.targets=w.length,m.messages=y.map(x=>x.message).filter(x=>typeof x=="string");}return process.stdout.write(`${JSON.stringify({command:"setup",runtime:r,result:S.exitCode===0?"ok":"failed",exitCode:S.exitCode,workspacePath:A,version:d,warmDeps:n,warmDependencies:m},null,2)}
-`),S.exitCode}finally{typeof b>"u"?delete process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT:process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT=b;}}let i=Ye(r,{runCommandInCwd:e,runCoreRapidkit:(b,k)=>e$2(b,{...k,cwd:void 0})}),c=await i.checkPrereqs(),l=await i.doctorHints(process.cwd()),p=Ie(process.cwd()),g=p||process.cwd(),u=null,f=async()=>r!=="java"||!p?[]:u||(u=(await Is(p)).filter(k=>{let S=j$2(k);return m$2(S,k)}),u);if(c.exitCode===0){console.log(s.green(`\u2705 ${r} prerequisites look good.`));let b=["python","node","go","java","dotnet","rust","php"].filter(k=>k!==r).join("/");if(console.log(s.gray(`  Scope: validated ${r} runtime only. ${b} checks are optional unless your workspace profile uses them.`)),r==="python"&&console.log(s.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),i.warmSetupCache&&((await i.warmSetupCache(g)).exitCode===0?console.log(s.gray(`  ${r} cache warm-up completed.`)):console.log(s.yellow(`  ${r} cache warm-up skipped (non-fatal).`))),n)if(r==="java"&&p){let k=await f();if(k.length>0){let S=0,A=0,E=0;for(let d of k){let m=await a("java",d),w=/skipped/i.test(m.message||""),y=P.relative(p,d)||P.basename(d);m.message&&console.log(s.gray(`  [${y}] ${m.message}`)),m.exitCode===0&&!w?S+=1:m.exitCode===0&&w?E+=1:A+=1;}S>0&&console.log(s.gray(`  java dependency warm-up completed for ${S} project(s) (--warm-deps).`)),A>0&&console.log(s.yellow(`  java dependency warm-up failed for ${A} project(s) (non-fatal).`)),S===0&&A===0&&E>0&&console.log(s.gray("  java dependency warm-up skipped for discovered workspace projects."));}else {let S=await a("java",g),A=/skipped/i.test(S.message||"");S.message&&console.log(s.gray(`  ${S.message}`)),S.exitCode===0&&!A?console.log(s.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):S.exitCode!==0&&console.log(s.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}}else {let k=await a(r,g),S=/skipped/i.test(k.message||"");k.message&&console.log(s.gray(`  ${k.message}`)),k.exitCode===0&&!S?console.log(s.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):k.exitCode!==0&&console.log(s.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}if(p)try{let k=t$1(p,"toolchain.lock").find(d=>O.existsSync(d))??q$1(p,"toolchain.lock"),S=q$1(p,"toolchain.lock"),A={};try{A=JSON.parse(await O.promises.readFile(k,"utf-8"));}catch{}(!A.runtime||typeof A.runtime!="object")&&(A.runtime={});let E=A.runtime;if(r==="python"){let d=null;try{let{execa:m}=await import('execa');for(let w of Ms()){let h=await m(w,w==="py"?["-3","--version"]:["--version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3});if(h.exitCode===0){let x=(h.stdout||h.stderr||"").match(/Python\s+(\S+)/);if(d=x?x[1]:null,d)break}}}catch{}E.python={...E.python||{},version:d,last_setup:new Date().toISOString()};}else if(r==="node")E.node={...E.node||{},version:process.version,last_setup:new Date().toISOString()};else if(r==="go"){let d=null;try{let{execa:m}=await import('execa'),y=((await m("go",["version"],{cwd:p,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);d=y?y[1]:null;}catch{}E.go={...E.go||{},version:d,last_setup:new Date().toISOString()};}else if(r==="java"){let d=null,m=null,w=null,y=await f(),v=O.existsSync(P.join(g,"pom.xml"))||O.existsSync(P.join(g,"build.gradle"))||O.existsSync(P.join(g,"build.gradle.kts"))?g:y[0]||g;try{let{execa:x}=await import('execa'),R=await x("java",["-version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3}),$=`${R.stdout||""}
-${R.stderr||""}`.match(/version\s+"([^"]+)"/i);d=$?$[1]:null;let j=O.existsSync(P.join(v,"pom.xml")),_=O.existsSync(P.join(v,"build.gradle"))||O.existsSync(P.join(v,"build.gradle.kts"));if(j){m="maven";let N=(()=>{let H=P.join(v,"mvnw.cmd");if(process.platform==="win32"&&O.existsSync(H))return H;let ce=P.join(v,"mvnw");return O.existsSync(ce)?ce:"mvn"})(),V=await x(N,["-version"],{cwd:v,stdio:"pipe",reject:false,timeout:3e3}),q=`${V.stdout||""}
-${V.stderr||""}`.match(/Apache Maven\s+(\S+)/i);w=q?q[1]:null;}else if(_){m="gradle";let N=(()=>{let H=P.join(v,"gradlew.bat");if(process.platform==="win32"&&O.existsSync(H))return H;let ce=P.join(v,"gradlew");return O.existsSync(ce)?ce:"gradle"})(),V=await x(N,["--version"],{cwd:v,stdio:"pipe",reject:false,timeout:3e3}),q=`${V.stdout||""}
-${V.stderr||""}`.match(/Gradle\s+(\S+)/i);w=q?q[1]:null;}}catch{}E.java={...E.java||{},version:d,build_tool:m,build_tool_version:w,last_setup:new Date().toISOString()};}else if(r==="dotnet"){let d=null;try{let{execa:m}=await import('execa'),y=((await m("dotnet",["--version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3})).stdout||"").trim();d=y.length>0?y:null;}catch{}E.dotnet={...E.dotnet||{},version:d,sdk:d,last_setup:new Date().toISOString()};}A.updated_at=new Date().toISOString(),await O.promises.writeFile(S,JSON.stringify(A,null,2)+`
+`;await $.promises.writeFile(r,o,"utf-8");}function qf(t){let e=t.trim().toLowerCase();return e==="true"||e==="1"||e==="on"?true:e==="false"||e==="0"||e==="off"?false:null}function mu(t){if(!t)return "isolated";let r=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated"?r:"isolated"}function gu(t){if(!t)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let e=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!e)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let r=e[1].toLowerCase();return r==="isolated"||r==="shared-runtime-caches"||r==="shared-node-deps"?{mode:r,status:"passed",message:`dependency_sharing_mode is valid: ${r}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${r}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function fu(t,e){let r=Ae(t),o=r?t$1(r,"policies.yml").find(c=>$.existsSync(c)):null,n="isolated";if(o&&await M__default.pathExists(o))try{let c=await $.promises.readFile(o,"utf-8"),l=gu(c);if(l.status==="failed")return console.log(s.red(`\u274C ${l.message}`)),{ok:false,code:1};n=l.mode;}catch{return console.log(s.red("\u274C Failed to read workspace policy file (.workspai/policies.yml).")),{ok:false,code:1}}let a=process.env.RAPIDKIT_DEP_SHARING_MODE,i=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=n,r&&(process.env.RAPIDKIT_WORKSPACE_PATH=r);try{return {ok:true,value:await e()}}finally{typeof a>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=a,typeof i>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=i;}}async function Re(t,e,r,o={}){let{buildPackageRunnerSubprocessEnv:n,resolvePackageRunnerInvocation:a}=await import('./platform-capabilities-DB4BZPTD.js'),i=zf(t,e,r),c=i?{command:process.execPath,prefixArgs:["-e",i]}:a(t),l=c.command,p=i?c.prefixArgs:[...c.prefixArgs,...e],f=n();if(i){xr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.nodeEval=${JSON.stringify({cwd:r,scriptBytes:i.length})}
+`);try{return mf.runInThisContext(i,{filename:b.join(r,"package.json#script")}),0}catch(d){return process.stderr.write(`${d instanceof Error?d.stack||d.message:String(d)}
+`),1}}let u=process.argv.includes("--json")||process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"||process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT==="1",g=t==="npm"&&(e[0]==="run"||e[0]==="run-script"||e[0]==="install"),y=process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"&&g||!u&&g,S=()=>{let d=f.npm_config_cache;if(!d)return "";let m=b.join(d,"_logs");try{let k=$.readdirSync(m).filter(v=>v.endsWith(".log")).map(v=>{let I=b.join(m,v);return {filePath:I,mtimeMs:$.statSync(I).mtimeMs}}).sort((v,I)=>I.mtimeMs-v.mtimeMs)[0]?.filePath;return k?$.readFileSync(k,"utf-8").split(/\r?\n/).map(v=>v.trim()).filter(v=>/(?:^|\s)(?:npm\s+)?(?:error|verbose\s+(?:stack|cwd|os|node|npm|exit|code))\b/i.test(v)).slice(0,12).join(`
+`):""}catch{return ""}},E=Number.parseInt(process.env.RAPIDKIT_CHILD_COMMAND_TIMEOUT_MS||"",10),R=o.timeoutMs&&o.timeoutMs>0?o.timeoutMs:Number.isFinite(E)&&E>0?E:void 0;return await new Promise(d=>{let m=[],w=[],k=false,h=null,v=null,I=()=>{try{v?.stdout?.destroy();}catch{}try{v?.stderr?.destroy();}catch{}try{v?.stdin?.destroy();}catch{}try{v?.removeAllListeners("close"),v?.removeAllListeners("error"),v?.unref();}catch{}};xr()&&process.stderr.write(`[workspai-cli] runCommandInCwd=${JSON.stringify({executable:l,args:p,cwd:r,directNodeEvalScript:i!==null,npmEnv:Object.fromEntries(Object.entries(f).filter(([P])=>["npm_config_if_present","npm_config_ignore_scripts","npm_config_loglevel","npm_config_silent","npm_config_json","npm_lifecycle_event","npm_lifecycle_script"].includes(P)))})}
+`);let x=b$3()&&/\.(?:cmd|bat)$/i.test(l);v=spawn(l,p,{stdio:y?"inherit":["ignore","pipe","pipe"],cwd:r,shell:x,env:f,detached:!b$3()}),R&&R>0&&(h=setTimeout(()=>{if(!k){if(k=true,!b$3()&&v.pid)try{process.kill(-v.pid,"SIGTERM");}catch{v.kill("SIGTERM");}else v.kill("SIGTERM");I(),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`RapidKit command timed out after ${R}ms: ${l} ${p.join(" ")}
+`),d(124);}},R)),y||(v.stdout?.on("data",P=>{m.push(P);}),v.stderr?.on("data",P=>{w.push(P);})),v.on("close",P=>{if(k)return;k=true,h&&clearTimeout(h);let A=Buffer.concat(m),C=Buffer.concat(w),_=!y&&P&&P!==0&&A.length===0&&C.length===0&&t==="npm"?S():"";xr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.close=${JSON.stringify({code:P,stdoutBytes:A.length,stderrBytes:C.length,npmFailureExcerptBytes:_.length})}
+`),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&(A.length>0&&process.stdout.write(A),C.length>0?process.stderr.write(C):_&&process.stderr.write(`${_}
+`)),d(P??1);}),v.on("error",P=>{k||(k=true,h&&clearTimeout(h),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`Workspai could not execute ${l}: ${P.message}. Install the required runtime or tool and ensure it is available on PATH.
+`),d(1));});})}function zf(t,e,r){if(t!=="npm")return null;let o=e[0];if(o!=="run"&&o!=="run-script")return null;let n=e.find((i,c)=>c>0&&!i.startsWith("-"));if(!n)return null;let a=b.join(r,"package.json");if(!$.existsSync(a))return null;try{let c=JSON.parse($.readFileSync(a,"utf8")).scripts?.[n];return typeof c!="string"?null:Yf(c)}catch{return null}}function Yf(t){let e=t.trim(),r=e.match(/^node\s+(?:-e|--eval)\s+"((?:\\.|[^"\\])*)"$/);if(r)return r[1].replace(/\\"/g,'"').replace(/\\\\/g,"\\");let o=e.match(/^node\s+(?:-e|--eval)\s+'((?:\\.|[^'\\])*)'$/);return o?o[1].replace(/\\'/g,"'").replace(/\\\\/g,"\\"):null}async function Jn(t,e){await M__default.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}function Xf(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function Qf(t,e,r){let o=Mt(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":b.basename(e),n=Xf(r||o)||"imported-project",a=0;for(;;){let i=a===0?n:a===1?`${n}-imported`:`${n}-imported-${a}`,c=b.join(t,i);if(!await M__default.pathExists(c))return c;a+=1;}}async function Ls(t,e,r){let o=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?b.resolve(e.workspace):null,a=n?{workspacePath:n,error:null}:Ds(process.cwd()),i=a.workspacePath,c=false,l=false,p=false;if(a.error)return e.json?console.log(JSON.stringify(c$1({operation:"import",code:a.error.code,message:a.error.message,context:a.error.context}),null,2)):console.log(s.red(`\u274C ${a.error.message}`)),1;if(n){if(!Qe(n)){let g=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:g},null,2)):console.log(s.red(`\u274C ${g}`)),1}}else (!i||!Qe(i))&&(i=p$2(),c=true,p=true);if(!i||!Qe(i)&&!p){let g="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:g},null,2)):(console.log(s.red(`\u274C ${g}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let f="npx workspai project workspace status --json",u;try{let g=await Qf(i,t,e.name);if(u=await Vn(i,{ownedDestination:g,ownedWorkspace:p?i:void 0}),p){let y=await Us({silent:e.json});i=y.workspacePath,l=y.created;}let j=await _d({workspacePath:i,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0,projectGrounding:e.projectGrounding});j.path!==g&&u.registerCompensation(()=>M__default.remove(j.path));try{if(r?.syncWorkspaceProjects)await r.syncWorkspaceProjects(i);else {if(o)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:y,registerWorkspaceStrict:S}=await import('./workspace-CBQDOUSH.js'),{resolveWorkspaceRegistrationName:E}=await import('./workspace-marker-7U3NYRPJ.js');await S(i,await E(i)),await y(i,j.name,j.path);}await u.commit(),await fo(i,{silent:e.json});}catch(y){try{await Ir(u,y);}catch(S){if(S!==y)throw S}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${y instanceof Error?y.message:String(y)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:i,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?l:false,projectWorkspaceCommand:f,commandsResolveWorkspaceFromProject:true,plan:j.ingestionPlan,importedProject:j},null,2)),0;if(c&&console.log(s.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${i}`)),l&&console.log(s.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),console.log(s.green(`\u2714 Imported project: ${j.name}`)),console.log(s.gray(`   Workspace: ${i}`)),console.log(s.gray(`   Destination: ${j.path}`)),console.log(s.gray(`   Stack: ${j.stack} (${j.confidence})`)),console.log(s.gray(`   Source: ${e.git===true||Mt(t)?"git-url":"local-folder"}`)),!j.profileCompatibility.ok){let y=s$1(j.profileCompatibility);console.log(s.yellow(`   Profile warning: ${j.profileCompatibility.message}`)),y&&console.log(s.gray(`   ${y}`));}return console.log(s.gray("   Workspai commands now resolve this workspace directly from the imported project.")),console.log(s.gray(`   Check: ${f}`)),0}catch(g){if(u)try{await Ir(u,g);}catch(y){y!==g&&(g=y);}let j=g instanceof Error?g.message:String(g);return e.json?console.log(JSON.stringify({error:j},null,2)):console.log(s.red(`\u274C Import failed: ${j}`)),1}}async function hu(t,e,r){let o,n,a=(P,A)=>{n=P,o&&(o.text=A),c$7({blockId:P,status:"running",message:A,component:"adopt"});},i=(P,A)=>{c$7({blockId:P,status:"succeeded",message:A,component:"adopt"}),n===P&&(n=void 0);},c=(P,A)=>{c$7({blockId:P,status:"skipped",message:A,component:"adopt"});},l=P=>{n&&(c$7({blockId:n,status:"failed",message:P,component:"adopt"}),n=void 0);};a("adopt.resolve","Resolving project and workspace");let p=b.resolve(t||process.cwd()),f=e.workspace?b.resolve(e.workspace):null,u=null,g="nearest",j=false,y=false,S=false,E=false,R=false,d=null,m=f?{workspacePath:null,error:null}:Ds(process.cwd());if(!f&&!m.error&&!m.workspacePath&&(m=Ds(p)),m.error)return l(m.error.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:m.error.code,message:m.error.message,context:m.error.context}),null,2)):console.log(s.red(`\u274C ${m.error.message}`)),1;if(f){let P=await Md(f,{dryRun:e.dryRun});if(!P.ok)return l(P.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:P.code,message:P.message}),null,2)):console.log(s.red(`\u274C ${P.message}`)),1;({workspacePath:u,resolution:g,usedDefaultWorkspace:j,willCreateDefaultWorkspace:S,willBootstrapWorkspace:E,bootstrapTargetPath:d}=P.result);}else if(m.workspacePath&&Qe(m.workspacePath))u=m.workspacePath,g="nearest";else {let P=await Af(p,{json:e.json,explicitWorkspace:false}),A=await Wd({sourcePath:p,outsideWorkspaceMode:P,dryRun:e.dryRun});if(!A.ok)return l(A.message),e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:A.code,message:A.message}),null,2)):console.log(s.red(`\u274C ${A.message}`)),1;({workspacePath:u,resolution:g,usedDefaultWorkspace:j,willCreateDefaultWorkspace:S,willBootstrapWorkspace:E,bootstrapTargetPath:d}=A.result);}let w=g==="explicit-bootstrap"||g==="parent-bootstrap",k=j&&(e.dryRun===true||S)||w&&(e.dryRun===true||E)||u!==null&&Qe(u);if(!u||!Qe(u)&&!k){let P="Not inside a Workspai workspace";return l(P),e.json?console.log(JSON.stringify({error:P},null,2)):(console.log(s.red(`\u274C ${P}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let h=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),v,I=null,x=null;try{if(e.dryRun!==true){if(v=await Vn(u,{projectPath:p,ownedWorkspace:S||E?u:void 0}),S){let D=await Us({silent:e.json});u=D.workspacePath,y=D.created;}E&&d&&(await Rf(d,v),R=true);}!e.json&&process.stdout.isTTY&&(o=b$8("Analyzing project for adoption",{component:"adopt",phase:"adopt.lifecycle",metadata:{dryRun:e.dryRun===true,workspaceResolution:g}})),i("adopt.resolve","Project and workspace resolved"),a("adopt.detect","Detecting architecture and adoption effects");let P=await fs(u,p),A=await hs({workspacePath:u,source:p,name:e.name,dryRun:e.dryRun===true,projectGrounding:e.projectGrounding,rollbackSnapshot:P});i("adopt.detect","Architecture and adoption effects detected");let C="npx workspai project workspace status --json",_=e.dryRun===true?b$5({startPath:p}):null,N=e.dryRun!==true||_!==null&&b.resolve(_.workspacePath)===b.resolve(u)&&(!_.projectPath||b.resolve(_.projectPath)===p);if(e.dryRun!==true){a("adopt.link","Linking project to workspace");try{if(r?.registerWorkspace||r?.registerProjectInWorkspace||r?.syncWorkspaceProjects)r.registerWorkspace&&await r.registerWorkspace(u,b.basename(u)),r.registerProjectInWorkspace&&await r.registerProjectInWorkspace(u,A.name,A.path),r.syncWorkspaceProjects&&await r.syncWorkspaceProjects(u);else {let{registerProjectInWorkspaceStrict:q,registerWorkspaceStrict:J}=await import('./workspace-CBQDOUSH.js'),{resolveWorkspaceRegistrationName:ae}=await import('./workspace-marker-7U3NYRPJ.js');if(await J(u,await ae(u)),await q(u,A.name,A.path),h)throw new Error("forced sync failure for command-level adopt rollback test")}if(i("adopt.link","Project linked to workspace"),a("adopt.publish","Sealing workspace intelligence"),I=await fo(u,{silent:e.json,strict:true}),!I?.freshnessSealed)throw new Error("Workspace consumer artifacts were generated without a freshness seal.");i("adopt.publish","Workspace intelligence freshness sealed"),a("adopt.ground","Building the project agent entry");let{buildAgentBootstrapReceipt:D}=await import('./project-agent-entry-75WO3QWP.js');if(x=await D({startPath:p,forAgent:"generic",validateLiveInputs:true}),x.status==="blocked"){let q=x.checks.filter(J=>J.status==="failed").map(J=>`${J.id}: ${J.message}`).join("; ");throw new Error(`Adopted project did not produce a usable agent-grounding route${q?` (${q})`:"; inspect the bootstrap checks."}`)}await v?.commit(),i("adopt.ground","Project agent entry is ready");}catch(D){if(v)try{await Ir(v,D);}catch(q){if(q!==D)throw q}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${D instanceof Error?D.message:String(D)}`)}}else c("adopt.link","Dry run: workspace link not written"),c("adopt.publish","Dry run: workspace intelligence not published"),c("adopt.ground","Dry run: project agent entry not written");if(o?.succeed(e.dryRun===true?"Adoption preview ready":"Project adoption ready"),o=void 0,e.json)return console.log(JSON.stringify({workspacePath:u,workspaceResolution:g,defaultWorkspaceCreated:j?y:false,workspaceBootstrapped:R,wouldCreateDefaultWorkspace:j&&e.dryRun===true?!Qe(u):false,wouldBootstrapWorkspace:w&&e.dryRun===true?!Qe(u):false,projectWorkspaceCommand:C,commandsResolveWorkspaceFromProject:N,dryRun:e.dryRun===true,plan:A.ingestionPlan,adoptedProject:A,consumerArtifacts:e.dryRun===true||!I?null:{freshnessSealed:I.freshnessSealed,reconciledAfterGrounding:I.reconciledAfterGrounding,warnings:I.warnings},agentBootstrap:x},null,2)),0;j?console.log(s.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${u}`)):R&&console.log(s.green(`\u2714 Workspace bootstrapped at: ${u}`)),y&&e.dryRun!==true&&console.log(s.green("\u2713 Workspace ready \xB7 1 registered project \xB7 model + graph + agent grounding sealed")),e.dryRun===true&&(console.log(s.yellow("\u2139 Dry run: no adoption files were written.")),console.log(s.gray("   Planned effects: project metadata + workspace registration + model, graph, and agent-grounding sync.")),A.effects.repositoryControlFiles.length>0&&console.log(s.gray(`   Repository controls may be reconciled: ${A.effects.repositoryControlFiles.map(D=>D.path).join(", ")}.`))),console.log(s.green(`\u2714 Adopted project: ${A.name}`)),console.log(s.gray(`   Workspace: ${u}`)),console.log(s.gray(`   Project: ${A.path}`)),console.log(s.gray("   Mode: linked (source was not moved or copied)"));let V=A.stack==="unknown"?A.frameworkDisplayName||A.runtime:A.stack;if(console.log(s.gray(`   Stack: ${V} (${A.confidence})`)),!A.profileCompatibility.ok){let D=s$1(A.profileCompatibility);console.log(s.yellow(`   Profile warning: ${A.profileCompatibility.message}`)),D&&console.log(s.gray(`   ${D}`));}return console.log(s.gray(`   Report: ${A.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(s.gray("   Workspai commands now resolve this workspace directly from the project.")),console.log(s.gray(`   Consumer evidence: ${I?.freshnessSealed?"freshness sealed":"not sealed"}${I?.reconciledAfterGrounding?" after grounding reconciliation":""}.`)),console.log(s.gray(`   Agent grounding: ${x?.status??"unknown"}; project environment: ${x?.readiness.projectEnvironment??"unknown"}; release: ${x?.readiness.release??"not-verified"}.`)),console.log(s.gray(`   Check: ${C}`)),console.log(s.gray("   Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(P){if(v)try{await Ir(v,P);}catch(C){C!==P&&(P=C);}let A=P instanceof Error?P.message:String(P);return l(A),o?.fail("Project adoption failed"),o=void 0,e.json?console.log(JSON.stringify({error:A},null,2)):console.log(s.red(`\u274C Adopt failed: ${A}`)),1}}async function Fs(t){let e=new Set(["python-only","polyglot","enterprise"]),r=Zf(),o="minimal",n=false;try{let l=t$1(t,"workspace.json").find(f=>$.existsSync(f))??q$1(t,"workspace.json"),p=JSON.parse(await $.promises.readFile(l,"utf-8"));o=p.profile??"minimal",n=p.bootstrap_note==="python-engine-skipped"||p.engine?.python_core?.status==="skipped";}catch{o="minimal";}if(!await(async()=>{if(m$1(o)&&o!=="minimal")return  false;if(!n&&e.has(o))return  true;let l$1=await Gs(t);if(l$1.length===0)return  false;for(let p of l$1){let f=j$2(p),u=f?.module_support,g=typeof f?.kit_name=="string"?f.kit_name:typeof f?.kit=="string"?f.kit:void 0,j=g?a$3(g):null;if(n||o==="minimal"){if(j?.workspacePythonEngine==="required")return  true;continue}if(!(k$2(f,p)||m$2(f,p)||n$1(f,p))&&u!==false)return o$2(f,p)||l(f,p),true}return  false})())return 0;let i="poetry";try{let{readWorkspaceMarker:l}=await import('./workspace-marker-7U3NYRPJ.js'),f=(await l(t))?.metadata?.npm?.installMethod;(f==="poetry"||f==="venv"||f==="pipx"||f==="pip")&&(i=f);}catch{}let c=async()=>{let l=kf(t),p=await jf(t);if(p!==0)return p;let f=f$3("DEV_PATH"),g=(f?await M__default.pathExists(f):false)&&f?["-m","pip","install",f,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await Re(l,g,t,{timeoutMs:r})};if(i==="venv"){let l=await c();if(l!==0)return l}else if(i==="poetry"){let l=b.join(t,"pyproject.toml"),p=false;try{p=(await $.promises.readFile(l,"utf-8")).includes("rapidkit-core");}catch{p=false;}if(p){let f=await c();if(f!==0)return f}else {let f=await Re("poetry",["install","--no-root"],t,{timeoutMs:r});if(f!==0)return f;let u=await Re("poetry",["add","rapidkit-core"],t,{timeoutMs:r});if(u!==0)return u}}else return 0;try{let{writeWorkspaceLauncher:l}=await import('./create-P4XJVZCL.js');await l(t,i==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:l}=await import('./workspace-python-engine-state-VCOLSEWV.js');await l(t,{installMethod:i==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function Zf(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function Gs(t){let e=[],r=new Set,o=[t];for(;o.length>0;){let n=o.pop();if(!n||r.has(n))continue;r.add(n);let a=[];try{a=await $.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){if(!i.isDirectory()||i.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(i.name))continue;let c=b.join(n,i.name);if((await Promise.all([...u(c,"context.json"),...u(c,"project.json")].map(p=>M__default.pathExists(p)))).some(Boolean)){e.push(c);continue}o.push(c);}}return e}function eh(t){return o$6(t)}async function Us(t={}){let e=p$2(),r=b.basename(e),o=Qe(e);if(!o){let{createProject:n}=await import('./create-P4XJVZCL.js'),a=process.env.WORKSPAI_LOG_FORMAT,i=console.log,c$1=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(r,{parentDirectory:b.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await c(),suppressReceipt:true});}finally{t.silent&&(console.log=i,console.warn=c$1,a===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=a);}}return {workspacePath:e,created:!o}}async function As(t){let r=await Xe("go",{runCommandInCwd:Re,runCoreRapidkit:e$2}).initProject(t);return ce(r)}function ce(t){return t.message&&console.log(s.red(`\u274C ${t.message}`)),t.exitCode}async function Yt(t,e){let r=Xe("node",{runCommandInCwd:Re,runCoreRapidkit:e$2});if(t==="init"){let n=await r.initProject(e);return ce(n)}if(t==="dev"){let n=await r.runDev(e);return ce(n)}if(t==="test"){let n=await r.runTest(e);return ce(n)}if(t==="build"){let n=await r.runBuild(e);return ce(n)}if(t==="lint"){let n=await r.runLint?.(e);return ce(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ce(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ce(o)}async function Ct(t,e){let r=Xe("java",{runCommandInCwd:Re,runCoreRapidkit:e$2});if(t==="init"){let n=await r.initProject(e);return ce(n)}if(t==="dev"){let n=await r.runDev(e);return ce(n)}if(t==="test"){let n=await r.runTest(e);return ce(n)}if(t==="build"){let n=await r.runBuild(e);return ce(n)}if(t==="lint"){let n=await r.runLint?.(e);return ce(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e);return ce(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e);return ce(o)}function Rs(t,e,r){let o=r.filter(n=>n.status==="failed").map(n=>{let a=n.id||"check";return n.message?`${a}: ${n.message}`:a}).slice(0,12);return f$7(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:o,runId:e$e()})}async function th(t$2,e=Vs){if(t$2.includes("--help")||t$2.includes("-h")||t$2.includes("help"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let r=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof r>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let a=function(O){if(!O)return null;let K=O.trim().toLowerCase();return K==="minimal"||K==="java-only"||K==="go-only"||K==="dotnet-only"||K==="python-only"||K==="node-only"||K==="polyglot"||K==="enterprise"?K:null},i=function(O){let Te=O.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Me=(xe,Ze)=>{let pt=O.match(new RegExp(`^\\s*${xe}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return pt?pt[1].toLowerCase()==="true":Ze};return {mode:Te,dependency_sharing_mode:mu(O),rules:{enforce_workspace_marker:Me("enforce_workspace_marker",true),enforce_toolchain_lock:Me("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Me("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Me("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Me("require_mirror_lock_for_offline",true)}}};let c=["init"],l$1,p=false,f=false,u=false,g=false;for(let O=1;O<t$2.length;O+=1){let K=t$2[O];if(K==="--ci"){p=true;continue}if(K==="--offline"){f=true;continue}if(K==="--json"){u=true;continue}if(K==="--compliance-only"){g=true;continue}if(K==="--profile"){let H=t$2[O+1];if(!H||H.startsWith("-"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;l$1=H,O+=1;continue}if(K.startsWith("--profile=")){l$1=K.slice(10);continue}c.push(K);}let j=a(l$1);if(l$1&&!j)return console.log(s.red(`Invalid profile: ${l$1}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let y=process.cwd(),S=c.slice(1).filter(O=>!O.startsWith("-"));if(S.length>0){let O=b.resolve(y,S[0]),K=j$2(O),H=$.existsSync(O)?await Xt(O):"unknown";if(!Qe(O)&&(k$2(K,O)||m$2(K,O)||n$1(K,O)||l(K,O)||o$2(K,O)||H!=="unknown"))return await e(c)}let E=b.join(y,".rapidkit-workspace"),R=b.join(y,".rapidkit","workspace.json"),d;!$.existsSync(E)&&$.existsSync(R)?d=y:(d=Ae(y),d||(d=Jf(y)));let m=[],w=null,k=null;if(d)try{let O=t$1(d,"workspace.json").find(Te=>$.existsSync(Te))??q$1(d,"workspace.json"),K=await $.promises.readFile(O,"utf-8"),H=JSON.parse(K);k=a(H.profile);}catch{k=null;}let h=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],v={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only   \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot    \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},I=j;if(!!d&&!j&&!p&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let O=k||"minimal",{chosenProfile:K}=await b$1([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${O})`,choices:h.map(H=>({name:H===O?`${v[H]}   \u2190 current`:v[H],value:H})),default:h.indexOf(O)}]);I=K;}let P=I||k||"minimal";if(d&&!g)try{let K=P==="python-only"||P==="polyglot"||P==="enterprise"?"poetry":"venv",H;try{let Ze=(await $.promises.readFile(b.join(d,".python-version"),"utf-8")).trim();Ze&&(H=Ze);}catch{}let{syncWorkspaceFoundationFiles:Te}=await import('./create-P4XJVZCL.js'),Me=await Te(d,{workspaceName:b.basename(d),installMethod:K,pythonVersion:H,profile:P,writeMarker:true,writeGitignore:true,onlyIfMissing:true});m.push({id:"workspace.foundation.sync",status:Me.length>0?"passed":"skipped",message:Me.length>0?`Workspace foundation synchronized: ${Me.join(", ")}`:"Workspace foundation files are already up to date."});}catch(O){m.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${O.message}`});}else d&&m.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(d&&!g&&I)try{let O=q$1(d,"workspace.json"),K=await $.promises.readFile(O,"utf-8"),H=JSON.parse(K);if(H.profile=I,l$6.has(I)){delete H.bootstrap_note;let Me=H.engine&&typeof H.engine=="object"?H.engine:void 0;Me&&delete Me.python_core;}await M__default.ensureDir(b.dirname(O)),await $.promises.writeFile(O,JSON.stringify(H,null,2)+`
+`,"utf-8");let{syncWorkspaceContract:Te}=await import('./workspace-contract-PMHUUKFM.js');await Te({workspacePath:d}),m.push({id:"workspace.profile.sync",status:"passed",message:`Workspace profile synchronized to ${I} across canonical artifacts.`});}catch(O){m.push({id:"workspace.profile.sync",status:"failed",message:`Failed to synchronize workspace profile across canonical artifacts: ${O instanceof Error?O.message:String(O)}`});}let A={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},C=null;if(d)try{let O=t$1(d,"policies.yml").find(H=>$.existsSync(H));if(!O)throw new Error("policy file missing");let K=await $.promises.readFile(O,"utf-8");C=K,A=i(K);}catch{m.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else m.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(d){let O=gu(C);A.dependency_sharing_mode=O.mode,m.push({id:"policy.schema.dependency_sharing_mode",status:O.status,message:O.message}),m.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:A.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":A.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let K=$.existsSync(b.join(d,".workspai-workspace"))||$.existsSync(b.join(d,".rapidkit-workspace"));m.push({id:"policy.enforce_workspace_marker",status:!A.rules.enforce_workspace_marker||K?"passed":"failed",message:!A.rules.enforce_workspace_marker||K?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let H=t$1(d,"toolchain.lock").some(We=>$.existsSync(We));m.push({id:"policy.enforce_toolchain_lock",status:!A.rules.enforce_toolchain_lock||H?"passed":"failed",message:!A.rules.enforce_toolchain_lock||H?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Te=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||t$1(d,"trusted-sources.lock").some(We=>$.existsSync(We));m.push({id:"policy.disallow_untrusted_tool_sources",status:!A.rules.disallow_untrusted_tool_sources||Te?"passed":"failed",message:!A.rules.disallow_untrusted_tool_sources||Te?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let Me=t$1(d,"compatibility-matrix.json").find(We=>$.existsSync(We))??q$1(d,"compatibility-matrix.json"),xe=$.existsSync(Me),Ze=A.rules.enforce_compatibility_matrix;if(m.push({id:"policy.enforce_compatibility_matrix",status:!Ze||xe?"passed":"failed",message:!Ze||xe?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),xe)try{let We=await $.promises.readFile(Me,"utf-8"),jt=JSON.parse(We),zs=!!jt&&typeof jt=="object";m.push({id:"compatibility.matrix.parse",status:zs?"passed":"failed",message:zs?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{m.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let pt=t$1(d,"mirror-config.json").find(We=>$.existsSync(We))??q$1(d,"mirror-config.json"),Or=t$1(d,"mirror.lock").find(We=>$.existsSync(We))??q$1(d,"mirror.lock"),Hn=$.existsSync(pt),Bn=$.existsSync(Or),qs={};if(Hn)try{qs=JSON.parse(await $.promises.readFile(pt,"utf-8")),m.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{m.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(g)m.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let We=await gs(d,{ciMode:p,offlineMode:f});m.push(...We.checks.map(jt=>({id:jt.id,status:jt.status,message:jt.message}))),w=We.details,We.details.lockWritten&&(Bn=true);}if(f){let We=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||qs.enabled===true;m.push({id:"offline.mirror.enabled",status:We?"passed":"failed",message:We?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let jt=A.rules.require_mirror_lock_for_offline;m.push({id:"offline.mirror.lock",status:!jt||Bn?"passed":"failed",message:!jt||Bn?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else m.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let ho=n$2({profile:P,runtimes:await r$1(d),mode:A.mode});ho.profile!=="enterprise"?m.push({id:ho.checkId,status:ho.status,message:ho.message}):(m.push({id:"profile.enterprise.ci",status:p?"passed":g?"skipped":"failed",message:p?"enterprise profile running with --ci.":g?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),m.push({id:"profile.enterprise.compatibility-matrix",status:xe?"passed":"failed",message:xe?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),m.push({id:"profile.enterprise.mirror-config",status:Hn?"passed":"failed",message:Hn?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}p&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),f&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let N=m.some(O=>O.id.startsWith("policy.schema.")&&O.status==="failed")||A.mode==="strict"&&m.some(O=>O.status==="failed"),D=q$1(d||y,"reports"),q=new Date().toISOString().replace(/[:.]/g,"-"),J=b.join(D,`bootstrap-compliance-${q}.json`),ae=b.join(D,"bootstrap-compliance.latest.json"),pe={schemaVersion:s$2.bootstrapCompliance.schemaVersion,command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:d,profile:P,options:{ci:p,offline:f,strict:A.mode==="strict",complianceOnly:g},policyMode:A.mode,policyRules:A.rules,mirrorLifecycle:w,checks:m},se=async O=>{b$r(`.workspai/reports/${b.basename(J)}`,O),b$r(t.bootstrapCompliance,O),await M__default.ensureDir(D),await Jn(J,O),await Jn(ae,O);};if(N){let O=Rs({...pe,result:"blocked",initExitCode:null},1,m);return await se(O),u?process.stdout.write(`${JSON.stringify(O,null,2)}
+`):(console.log(s.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(s.gray(`Compliance report: ${J}`))),1}if(u&&P==="enterprise"&&!p&&!g){let O=Rs({...pe,result:"blocked",initExitCode:null,complianceOnly:false,bootstrapRuntimeSkipped:{reason:"enterprise JSON bootstrap requires --ci for deterministic non-interactive execution.",nextAction:"npx workspai bootstrap --profile enterprise --ci --json"}},1,m);return await se(O),process.stdout.write(`${JSON.stringify(O,null,2)}
+`),1}let ze=async O=>{let K=process.stdout.write.bind(process.stdout),H=process.stderr.write.bind(process.stderr),Te=[],Me=[];process.stdout.write=((xe,Ze,pt)=>{let Or=typeof Ze=="function"?Ze:typeof pt=="function"?pt:void 0;return Te.push(typeof xe=="string"?xe:xe instanceof Uint8Array?Buffer.from(xe).toString("utf8"):String(xe)),Or?.(),true}),process.stderr.write=((xe,Ze,pt)=>{let Or=typeof Ze=="function"?Ze:typeof pt=="function"?pt:void 0;return Me.push(typeof xe=="string"?xe:xe instanceof Uint8Array?Buffer.from(xe).toString("utf8"):String(xe)),Or?.(),true});try{return {exitCode:await O(),stdout:Te.join(""),stderr:Me.join("")}}finally{process.stdout.write=K,process.stderr.write=H;}},be=O=>{let K=O.split(/\r?\n/).map(H=>H.trim()).filter(Boolean);return {bytes:Buffer.byteLength(O),excerpt:K.slice(0,12)}},L=0,G;if(!g)if(u){let O=await ze(()=>e(c));L=O.exitCode,G={captured:true,stdout:be(O.stdout),stderr:be(O.stderr)};}else L=await e(c);let te=m.filter(O=>O.status==="failed").length,z=L!==0?"failed":te>0?"ok_with_warnings":"ok",ee=L!==0?L:te>0?1:0,Y=Rs({...pe,result:z,initExitCode:L,complianceOnly:g,...G?{initOutput:G}:{}},ee,m);if(await se(Y),d&&!g&&L===0)try{let{syncWorkspaceProjects:O}=await import('./workspace-CBQDOUSH.js');await O(d,u),await fo(d,{silent:u});}catch{}if(u)process.stdout.write(`${JSON.stringify(Y,null,2)}
+`);else {let O=m.filter(K=>K.status==="failed").length;O>0&&console.log(s.yellow(`\u26A0\uFE0F  Bootstrap completed with ${O} policy/profile warnings.`)),console.log(s.gray(`Compliance report: ${J}`));}return ee}finally{typeof r>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=r;}}async function rh(t,e=Re){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),0;let r=(t[1]||"").toLowerCase(),o=t.includes("--json"),n=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!r||!["python","node","go","java","dotnet","rust","php"].includes(r))return o?process.stdout.write(`${JSON.stringify({command:"setup",result:"error",error:"Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]"},null,2)}
+`):console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),1;let a=async(j,y)=>{if(j==="node"){if(!$.existsSync(b.join(y,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let E=$.existsSync(b.join(y,"pnpm-lock.yaml")),R=$.existsSync(b.join(y,"yarn.lock"));return E?{exitCode:await e("pnpm",["install","--lockfile-only","--ignore-scripts"],y)}:R?{exitCode:await e("yarn",["install","--ignore-scripts"],y)}:{exitCode:await e("npm",["install","--package-lock-only","--ignore-scripts"],y)}}if(j==="go")return $.existsSync(b.join(y,"go.mod"))?{exitCode:await e("go",["mod","download"],y)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."};if(j==="java"){let S=$.existsSync(b.join(y,"pom.xml")),E=$.existsSync(b.join(y,"build.gradle"))||$.existsSync(b.join(y,"build.gradle.kts")),R=b.join(y,process.platform==="win32"?"gradlew.bat":"gradlew"),d=$.existsSync(R);return !S&&!E?{exitCode:0,message:"Java warm-up skipped: pom.xml or build.gradle not found in current directory."}:S?{exitCode:await e("mvn",["-B","-q","-DskipTests","dependency:go-offline"],y)}:{exitCode:await e(d?R:"gradle",["--no-daemon","dependencies"],y)}}return j==="dotnet"?(()=>{let E=[{dir:y,depth:0}],R=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;E.length>0;){let d=E.shift();if(!d||d.depth>3)continue;let m=[];try{m=$.readdirSync(d.dir,{withFileTypes:true});}catch{continue}for(let w of m)if(w.isFile()){let k=w.name.toLowerCase();if(k.endsWith(".sln")||k.endsWith(".csproj"))return  true}else w.isDirectory()&&!R.has(w.name)&&E.push({dir:b.join(d.dir,w.name),depth:d.depth+1});}return  false})()?{exitCode:await e("dotnet",["restore"],y)}:{exitCode:0,message:".NET warm-up skipped: .sln or *.csproj not found in current project tree."}:j==="rust"?$.existsSync(b.join(y,"Cargo.toml"))?{exitCode:await e("cargo",["fetch"],y)}:{exitCode:0,message:"Rust warm-up skipped: Cargo.toml not found in current directory."}:j==="php"?$.existsSync(b.join(y,"composer.json"))?{exitCode:await e("composer",["install","--no-interaction","--no-scripts"],y)}:{exitCode:0,message:"PHP warm-up skipped: composer.json not found in current directory."}:{exitCode:0,message:"Dependency warm-up is not available for this runtime."}};if(o){let j=process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT;process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT="1";try{let S=await Xe(r,{runCommandInCwd:e,runCoreRapidkit:async(w,k)=>(await g$9(w,{...k,cwd:void 0})).exitCode}).checkPrereqs(),E=Ae(process.cwd()),R=E||process.cwd(),d=null;if(r==="node"&&S.exitCode===0&&(d=process.version),E&&d){let w=t$1(E,"toolchain.lock").find(v=>$.existsSync(v))??q$1(E,"toolchain.lock"),k=q$1(E,"toolchain.lock"),h={};try{h=JSON.parse(await $.promises.readFile(w,"utf-8"));}catch{}(!h.runtime||typeof h.runtime!="object")&&(h.runtime={}),h.runtime[r]={version:d,detectedAt:new Date().toISOString()},await M__default.ensureDir(b.dirname(k)),await $.promises.writeFile(k,JSON.stringify(h,null,2)+`
+`,"utf-8");}let m={requested:n,status:"not-requested",exitCode:null,targets:0,messages:[]};if(n&&S.exitCode===0){let w=[R];if(r==="java"&&E){let x=(await Gs(E)).filter(P=>{let A=j$2(P);return m$2(A,P)});x.length>0&&(w=x);}let k=[];for(let I of w)k.push(await a(r,I));let h=k.filter(I=>I.exitCode!==0),v=k.filter(I=>I.exitCode===0&&!/skipped/i.test(I.message||""));m.status=h.length>0?"failed":v.length>0?"passed":"skipped",m.exitCode=h[0]?.exitCode??0,m.targets=w.length,m.messages=k.map(I=>I.message).filter(I=>typeof I=="string");}return process.stdout.write(`${JSON.stringify({command:"setup",runtime:r,result:S.exitCode===0?"ok":"failed",exitCode:S.exitCode,workspacePath:E,version:d,warmDeps:n,warmDependencies:m},null,2)}
+`),S.exitCode}finally{typeof j>"u"?delete process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT:process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT=j;}}let i=Xe(r,{runCommandInCwd:e,runCoreRapidkit:(j,y)=>e$2(j,{...y,cwd:void 0})}),c=await i.checkPrereqs(),l=await i.doctorHints(process.cwd()),p=Ae(process.cwd()),f=p||process.cwd(),u=null,g=async()=>r!=="java"||!p?[]:u||(u=(await Gs(p)).filter(y=>{let S=j$2(y);return m$2(S,y)}),u);if(c.exitCode===0){console.log(s.green(`\u2705 ${r} prerequisites look good.`));let j=["python","node","go","java","dotnet","rust","php"].filter(y=>y!==r).join("/");if(console.log(s.gray(`  Scope: validated ${r} runtime only. ${j} checks are optional unless your workspace profile uses them.`)),r==="python"&&console.log(s.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),i.warmSetupCache&&((await i.warmSetupCache(f)).exitCode===0?console.log(s.gray(`  ${r} cache warm-up completed.`)):console.log(s.yellow(`  ${r} cache warm-up skipped (non-fatal).`))),n)if(r==="java"&&p){let y=await g();if(y.length>0){let S=0,E=0,R=0;for(let d of y){let m=await a("java",d),w=/skipped/i.test(m.message||""),k=b.relative(p,d)||b.basename(d);m.message&&console.log(s.gray(`  [${k}] ${m.message}`)),m.exitCode===0&&!w?S+=1:m.exitCode===0&&w?R+=1:E+=1;}S>0&&console.log(s.gray(`  java dependency warm-up completed for ${S} project(s) (--warm-deps).`)),E>0&&console.log(s.yellow(`  java dependency warm-up failed for ${E} project(s) (non-fatal).`)),S===0&&E===0&&R>0&&console.log(s.gray("  java dependency warm-up skipped for discovered workspace projects."));}else {let S=await a("java",f),E=/skipped/i.test(S.message||"");S.message&&console.log(s.gray(`  ${S.message}`)),S.exitCode===0&&!E?console.log(s.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):S.exitCode!==0&&console.log(s.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}}else {let y=await a(r,f),S=/skipped/i.test(y.message||"");y.message&&console.log(s.gray(`  ${y.message}`)),y.exitCode===0&&!S?console.log(s.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):y.exitCode!==0&&console.log(s.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}if(p)try{let y=t$1(p,"toolchain.lock").find(d=>$.existsSync(d))??q$1(p,"toolchain.lock"),S=q$1(p,"toolchain.lock"),E={};try{E=JSON.parse(await $.promises.readFile(y,"utf-8"));}catch{}(!E.runtime||typeof E.runtime!="object")&&(E.runtime={});let R=E.runtime;if(r==="python"){let d=null;try{let{execa:m}=await import('execa');for(let w of Bs()){let h=await m(w,w==="py"?["-3","--version"]:["--version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3});if(h.exitCode===0){let I=(h.stdout||h.stderr||"").match(/Python\s+(\S+)/);if(d=I?I[1]:null,d)break}}}catch{}R.python={...R.python||{},version:d,last_setup:new Date().toISOString()};}else if(r==="node")R.node={...R.node||{},version:process.version,last_setup:new Date().toISOString()};else if(r==="go"){let d=null;try{let{execa:m}=await import('execa'),k=((await m("go",["version"],{cwd:p,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);d=k?k[1]:null;}catch{}R.go={...R.go||{},version:d,last_setup:new Date().toISOString()};}else if(r==="java"){let d=null,m=null,w=null,k=await g(),v=$.existsSync(b.join(f,"pom.xml"))||$.existsSync(b.join(f,"build.gradle"))||$.existsSync(b.join(f,"build.gradle.kts"))?f:k[0]||f;try{let{execa:I}=await import('execa'),x=await I("java",["-version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3}),A=`${x.stdout||""}
+${x.stderr||""}`.match(/version\s+"([^"]+)"/i);d=A?A[1]:null;let C=$.existsSync(b.join(v,"pom.xml")),_=$.existsSync(b.join(v,"build.gradle"))||$.existsSync(b.join(v,"build.gradle.kts"));if(C){m="maven";let N=(()=>{let J=b.join(v,"mvnw.cmd");if(process.platform==="win32"&&$.existsSync(J))return J;let ae=b.join(v,"mvnw");return $.existsSync(ae)?ae:"mvn"})(),V=await I(N,["-version"],{cwd:v,stdio:"pipe",reject:false,timeout:3e3}),q=`${V.stdout||""}
+${V.stderr||""}`.match(/Apache Maven\s+(\S+)/i);w=q?q[1]:null;}else if(_){m="gradle";let N=(()=>{let J=b.join(v,"gradlew.bat");if(process.platform==="win32"&&$.existsSync(J))return J;let ae=b.join(v,"gradlew");return $.existsSync(ae)?ae:"gradle"})(),V=await I(N,["--version"],{cwd:v,stdio:"pipe",reject:false,timeout:3e3}),q=`${V.stdout||""}
+${V.stderr||""}`.match(/Gradle\s+(\S+)/i);w=q?q[1]:null;}}catch{}R.java={...R.java||{},version:d,build_tool:m,build_tool_version:w,last_setup:new Date().toISOString()};}else if(r==="dotnet"){let d=null;try{let{execa:m}=await import('execa'),k=((await m("dotnet",["--version"],{cwd:p,stdio:"pipe",reject:false,timeout:3e3})).stdout||"").trim();d=k.length>0?k:null;}catch{}R.dotnet={...R.dotnet||{},version:d,sdk:d,last_setup:new Date().toISOString()};}E.updated_at=new Date().toISOString(),await $.promises.writeFile(S,JSON.stringify(E,null,2)+`
 `,"utf-8"),console.log(s.gray("  toolchain.lock updated (.workspai/toolchain.lock)"));}catch{}}else console.log(s.red(`\u274C ${r} prerequisites check failed.`));if(l.length>0){console.log(s.gray(`
-Hints:`));for(let b of l)console.log(s.gray(`- ${b}`));}return c.exitCode}function Vf(t){let e={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let r of t.split(`
-`)){let o=r.trim(),n=o.match(/^strategy:\s*(\S+)/);n&&(e.strategy=n[1].replace(/['"]/g,""));let a=o.match(/^prune_on_bootstrap:\s*(true|false)/);a&&(e.prune_on_bootstrap=a[1]==="true");let i=o.match(/^self_heal:\s*(true|false)/);i&&(e.self_heal=i[1]==="true");let c=o.match(/^verify_integrity:\s*(true|false)/);c&&(e.verify_integrity=c[1]==="true");}return e}async function Jf(t){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),0;let e=(t[1]||"status").toLowerCase(),r=t.includes("--json"),o=t.includes("--dry-run"),n=vn.getInstance(),a=Ie(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(a)try{let c=t$1(a,"cache-config.yml").find(p=>O.existsSync(p));if(!c)throw new Error("cache config missing");let l=await O.promises.readFile(c,"utf-8");i=Vf(l);}catch{}if(e==="status"){let c={command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{enabled:true,strategy:i.strategy,selfHeal:i.self_heal,pruneOnBootstrap:i.prune_on_bootstrap,verifyIntegrity:i.verify_integrity,inMemory:true}};return r?(process.stdout.write(`${JSON.stringify(c,null,2)}
+Hints:`));for(let j of l)console.log(s.gray(`- ${j}`));}return c.exitCode}function oh(t){let e={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let r of t.split(`
+`)){let o=r.trim(),n=o.match(/^strategy:\s*(\S+)/);n&&(e.strategy=n[1].replace(/['"]/g,""));let a=o.match(/^prune_on_bootstrap:\s*(true|false)/);a&&(e.prune_on_bootstrap=a[1]==="true");let i=o.match(/^self_heal:\s*(true|false)/);i&&(e.self_heal=i[1]==="true");let c=o.match(/^verify_integrity:\s*(true|false)/);c&&(e.verify_integrity=c[1]==="true");}return e}async function nh(t){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),0;let e=(t[1]||"status").toLowerCase(),r=t.includes("--json"),o=t.includes("--dry-run"),n=Cn.getInstance(),a=Ae(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(a)try{let c=t$1(a,"cache-config.yml").find(p=>$.existsSync(p));if(!c)throw new Error("cache config missing");let l=await $.promises.readFile(c,"utf-8");i=oh(l);}catch{}if(e==="status"){let c={command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{enabled:true,strategy:i.strategy,selfHeal:i.self_heal,pruneOnBootstrap:i.prune_on_bootstrap,verifyIntegrity:i.verify_integrity,inMemory:true}};return r?(process.stdout.write(`${JSON.stringify(c,null,2)}
 `),0):(console.log(s.cyan("Workspai cache is enabled")),console.log(s.cyan("Workspai cache status")),a?(console.log(s.gray(`  Workspace: ${a}`)),console.log(s.gray(`  Strategy:          ${i.strategy}`)),console.log(s.gray(`  Self-heal:         ${i.self_heal}`)),console.log(s.gray(`  Prune on bootstrap:${i.prune_on_bootstrap}`)),console.log(s.gray(`  Verify integrity:  ${i.verify_integrity}`))):console.log(s.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(s.gray("  In-memory cache: enabled")),console.log(s.gray("  Use: workspai cache clear|prune|repair")),0)}return e==="clear"?(await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{cleared:true,strategy:i.strategy}},null,2)}
 `),0):(console.log(s.green("Cache clear completed")),console.log(s.green("\u2705 Cache cleared (all entries removed).")),0)):e==="prune"?(o||await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,dryRun:o,cache:{pruned:!o,strategy:i.strategy,pruneOnBootstrap:i.prune_on_bootstrap},nextActions:i.prune_on_bootstrap?[]:["Set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on bootstrap."]},null,2)}
 `),0):o?(console.log(s.green("Cache prune dry run completed")),console.log(s.gray("  No cache entries were removed.")),0):(console.log(s.green("\u2705 Cache pruned (stale entries removed).")),i.prune_on_bootstrap||console.log(s.gray("  Tip: set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on every bootstrap.")),0)):e==="repair"?i.self_heal?(await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{repaired:true,selfHeal:i.self_heal,verifyIntegrity:i.verify_integrity}},null,2)}
 `),0):(console.log(s.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),i.verify_integrity&&console.log(s.gray("  Integrity verification is enabled in cache-config.yml.")),0)):r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"skipped",timestamp:new Date().toISOString(),workspacePath:a,reason:"self_heal is disabled in .workspai/cache-config.yml",cache:{selfHeal:i.self_heal,verifyIntegrity:i.verify_integrity}},null,2)}
-`),0):(console.log(s.yellow("\u26A0\uFE0F  self_heal is disabled in .workspai/cache-config.yml \u2014 skipping repair.")),0):(console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),1)}async function Kf(t,e,r,o,n=false){let a=(e||"show").toLowerCase(),i=q$1(t,"policies.yml");if(a==="show"||a==="status"||a==="get"){let u=await Hd(t),f=Jd(u);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,policy:f},null,2)}
-`),0):(console.log(s.cyan(`Policy file: ${i}`)),console.log(s.gray(`  mode: ${f.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${f.dependency_sharing_mode}`)),console.log(s.gray("  rules:")),console.log(s.gray(`    enforce_workspace_marker: ${f.rules.enforce_workspace_marker}`)),console.log(s.gray(`    enforce_toolchain_lock: ${f.rules.enforce_toolchain_lock}`)),console.log(s.gray(`    disallow_untrusted_tool_sources: ${f.rules.disallow_untrusted_tool_sources}`)),console.log(s.gray(`    enforce_compatibility_matrix: ${f.rules.enforce_compatibility_matrix}`)),console.log(s.gray(`    require_mirror_lock_for_offline: ${f.rules.require_mirror_lock_for_offline}`)),console.log(s.gray("Examples:")),console.log(s.gray("  npx workspai workspace policy set mode strict")),console.log(s.gray("  npx workspai workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(s.gray("  npx workspai workspace policy set rules.enforce_toolchain_lock true")),0)}if(a!=="set")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_action",message:`Unknown workspace policy action: ${e||""}`},allowedActions:["show","status","get","set"]},null,2)}
+`),0):(console.log(s.yellow("\u26A0\uFE0F  self_heal is disabled in .workspai/cache-config.yml \u2014 skipping repair.")),0):(console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),1)}async function ah(t,e,r,o,n=false){let a=(e||"show").toLowerCase(),i=q$1(t,"policies.yml");if(a==="show"||a==="status"||a==="get"){let u=await nu(t),g=ru(u);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,policy:g},null,2)}
+`),0):(console.log(s.cyan(`Policy file: ${i}`)),console.log(s.gray(`  mode: ${g.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${g.dependency_sharing_mode}`)),console.log(s.gray("  rules:")),console.log(s.gray(`    enforce_workspace_marker: ${g.rules.enforce_workspace_marker}`)),console.log(s.gray(`    enforce_toolchain_lock: ${g.rules.enforce_toolchain_lock}`)),console.log(s.gray(`    disallow_untrusted_tool_sources: ${g.rules.disallow_untrusted_tool_sources}`)),console.log(s.gray(`    enforce_compatibility_matrix: ${g.rules.enforce_compatibility_matrix}`)),console.log(s.gray(`    require_mirror_lock_for_offline: ${g.rules.require_mirror_lock_for_offline}`)),console.log(s.gray("Examples:")),console.log(s.gray("  npx workspai workspace policy set mode strict")),console.log(s.gray("  npx workspai workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(s.gray("  npx workspai workspace policy set rules.enforce_toolchain_lock true")),0)}if(a!=="set")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_action",message:`Unknown workspace policy action: ${e||""}`},allowedActions:["show","status","get","set"]},null,2)}
 `),1):(console.log(s.red(`Unknown workspace policy action: ${e||""}`)),console.log(s.gray("Available: show, set")),1);if(!r||typeof o>"u")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.missing_arguments",message:"Usage: workspai workspace policy set <key> <value>"},allowedKeys:["mode","dependency_sharing_mode","rules.enforce_workspace_marker","rules.enforce_toolchain_lock","rules.disallow_untrusted_tool_sources","rules.enforce_compatibility_matrix","rules.require_mirror_lock_for_offline"]},null,2)}
-`),1):(console.log(s.yellow("Usage: workspai workspace policy set <key> <value>")),console.log(s.gray("Allowed keys:")),console.log(s.gray("  mode (warn|strict)")),console.log(s.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(s.gray("  rules.enforce_workspace_marker (true|false)")),console.log(s.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(s.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(s.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(s.gray("  rules.require_mirror_lock_for_offline (true|false)")),1);let c=r.trim(),p=await Hd(t);if(c==="mode"){let u=o.trim().toLowerCase();if(u!=="warn"&&u!=="strict")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_mode",message:"Invalid mode. Use: warn | strict"}},null,2)}
-`),1):(console.log(s.red("\u274C Invalid mode. Use: warn | strict")),1);p=Kd(p,"mode",`${u} # "warn" or "strict"`);}else if(c==="dependency_sharing_mode"){let u=o.trim().toLowerCase();if(u!=="isolated"&&u!=="shared-runtime-caches"&&u!=="shared-node-deps")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_dependency_sharing_mode",message:"Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps"}},null,2)}
-`),1):(console.log(s.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1);p=Kd(p,"dependency_sharing_mode",`${u} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(c.startsWith("rules.")){let u=c.slice(6);if(!(u in eu))return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_rule",message:`Unknown policy rule: ${u}`}},null,2)}
-`),1):(console.log(s.red(`\u274C Unknown policy rule: ${u}`)),1);let f=Nf(o);if(f===null)return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_boolean",message:"Rule values must be boolean: true | false"}},null,2)}
-`),1):(console.log(s.red("\u274C Rule values must be boolean: true | false")),1);p=_f(p,u,f);}else return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_key",message:`Unknown policy key: ${c}`}},null,2)}
-`),1):(console.log(s.red(`\u274C Unknown policy key: ${c}`)),1);await Of(t,p);let g=Jd(p);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,updatedKey:c,policy:g},null,2)}
-`),0):(console.log(s.green(`\u2705 Updated ${c} in .workspai/policies.yml`)),console.log(s.gray(`  mode: ${g.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${g.dependency_sharing_mode}`)),console.log(s.gray("  Tip: run `npx workspai workspace policy show` to inspect all values.")),0)}async function Hf(t$2){if(t$2.includes("--help")||t$2.includes("-h"))return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),0;let e=(t$2[1]||"status").toLowerCase(),r=t$2.includes("--json"),o=Ie(process.cwd());if(!o)return console.log(s.red("\u274C Not inside a Workspai workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let n=t$1(o,"mirror-config.json").find(u=>O.existsSync(u))??q$1(o,"mirror-config.json"),a=t$1(o,"mirror.lock").find(u=>O.existsSync(u))??q$1(o,"mirror.lock"),i=q$1(o,"mirror","artifacts"),c=q$1(o,"reports");async function l(u){if(!await M__default.pathExists(u))return 0;let f=0,b=[u];for(;b.length>0;){let k=b.shift();if(!k)continue;let S=await O.promises.readdir(k,{withFileTypes:true});for(let A of S)A.isFile()?f+=1:A.isDirectory()&&b.push(P.join(k,A.name));}return f}async function p(u){let f=new Date().toISOString().replace(/[:.]/g,"-"),b=P.join(c,`mirror-ops-${f}.json`),k=P.join(c,"mirror-ops.latest.json"),S={schemaVersion:s$2.mirrorOps.schemaVersion,...u};b$p(`.workspai/reports/${P.basename(b)}`,S),b$p(t.mirrorOps,S),await M__default.ensureDir(c),await Wn(b,S),await Wn(k,S);}async function g(){let u=await M__default.pathExists(n),f=await M__default.pathExists(a),b=await l(i);return {configExists:u,lockExists:f,artifactsCount:b}}if(e==="status"){let u=await M__default.pathExists(n),f=await M__default.pathExists(a),b=await l(i),k={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:{configExists:u,lockExists:f,artifactsCount:b}};return await p(k),r?(process.stdout.write(`${JSON.stringify(k,null,2)}
-`),0):(console.log(s.cyan("Workspai mirror status")),console.log(s.gray(`Workspace: ${o}`)),console.log(s.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(s.gray(`Lock: ${f?"present":"missing"} (${a})`)),console.log(s.gray(`Artifacts: ${b}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let u=await is(o,{ciMode:true,offlineMode:e==="verify",forceRun:true}),f=u.checks.filter(S=>S.status==="failed"),b=u.checks.some(S=>S.id.startsWith("mirror.verify.")&&S.status==="failed");if(e==="verify"&&b){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await g(),details:u.details,checks:u.checks};if(await p(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
-`),1;console.log(s.red("\u274C Mirror verify failed."));for(let A of u.checks.filter(E=>E.id.startsWith("mirror.verify.")))console.log(s.gray(`- ${A.id}: ${A.message}`));return 1}if(f.length>0){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await g(),details:u.details,checks:u.checks};if(await p(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
-`),1;console.log(s.yellow(`\u26A0\uFE0F  Mirror ${e} completed with ${f.length} issue(s).`));for(let A of f)console.log(s.gray(`- ${A.id}: ${A.message}`));return 1}let k={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:await g(),details:u.details,checks:u.checks};return await p(k),r?(process.stdout.write(`${JSON.stringify(k,null,2)}
-`),0):e==="rotate"?(console.log(s.green(`\u2705 Mirror rotate completed. Rotated files: ${u.details.rotatedFiles}.`)),0):e==="verify"?(console.log(s.green(`\u2705 Mirror verify completed. Verified artifacts: ${u.details.verifiedArtifacts}.`)),0):(console.log(s.green(`\u2705 Mirror sync completed. Synced artifacts: ${u.details.syncedArtifacts}.`)),0)}return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function Os(t){let e=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let r=process.cwd(),o=await ou(r,async()=>{let n=Ie(r),a=Ye("python",{runCommandInCwd:Ae,runCoreRapidkit:e$2}),i=Ye("dotnet",{runCommandInCwd:Ae,runCoreRapidkit:e$2}),c$1=Ye("rust",{runCommandInCwd:Ae,runCoreRapidkit:e$2}),l$1=Ye("php",{runCommandInCwd:Ae,runCoreRapidkit:e$2}),p=t.slice(1).filter(A=>!A.startsWith("-"));if(p.length>0){let A=P.resolve(r,p[0]),E=j$2(A),d=await zt(A);return k$2(E,A)||d==="go"?await ws(A):m$2(E,A)||d==="java"?await Ct("init",A):n$1(E,A)||d==="dotnet"?se(await i.initProject(A)):l(E,A)||d==="node"?await fs(A):o$2(E,A)||d==="python"?await gs(A,a):d==="rust"?se(await c$1.initProject(A)):d==="php"?se(await l$1.initProject(A)):await e$2(t,{cwd:r})}let g=j$2(r),u=!!Ie(r)&&r===Ie(r);if(!u&&k$2(g,r))return await ws(r);let f=await zt(r);if(!u&&(m$2(g,r)||f==="java"))return await Ct("init",r);if(!u&&(n$1(g,r)||f==="dotnet"))return se(await i.initProject(r));if(!u&&(l(g,r)||f==="node"))return await fs(r);if(!u&&(o$2(g,r)||f==="python"))return await gs(r,a);if(!u&&f==="rust")return se(await c$1.initProject(r));if(!u&&f==="php")return se(await l$1.initProject(r));let b=n||Ie(r),k=Qd(r),S=k?P.dirname(P.dirname(k)):null;if(S&&S!==b){let A=j$2(S),E=await zt(S);return k$2(A,S)||E==="go"?await ws(S):m$2(A,S)||E==="java"?await Ct("init",S):n$1(A,S)||E==="dotnet"?se(await i.initProject(S)):l(A,S)||E==="node"?await fs(S):o$2(A,S)||E==="python"?await gs(S,a):E==="rust"?se(await c$1.initProject(S)):E==="php"?se(await l$1.initProject(S)):await e$2(["init"],{cwd:S})}if(b&&r===b){console.log(s.yellow("\u26A0\uFE0F  Running `npx workspai init` at workspace root.")),console.log(s.gray("   Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n   workspace-profile dependencies first, then project dependency initialization.\n"));let A=await _s(b);if(A!==0)return A;let{runWorkspaceStage:E}=await import('./workspace-run-NVQGRZYO.js');return (await E({workspacePath:b,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:true,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!b){let A=await c(),E=l$7(),{name:d}=Lf(E);await M__default.ensureDir(E);let{createProject:m}=await import('./create-7UENFCJK.js');return await m(d,{yes:true,userConfig:A,parentDirectory:E}),0}return await e$2(t,{cwd:r})});return o.ok?o.value:o.code}finally{typeof e>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e;}}async function Ud(t){let e=Ie(t);if(!e)return [];let r="warn";try{let l=t$1(e,"policies.yml").find(u=>O.existsSync(u));if(!l)return [];let p=await O.promises.readFile(l,"utf-8");(p.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??p.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(r="strict");}catch{return []}if(r!=="strict")return [];let o=[],n=t$1(e,"toolchain.lock").find(l=>O.existsSync(l));if(!n||!O.existsSync(n))return o.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),o;let a={};try{a=JSON.parse(await O.promises.readFile(n,"utf-8"));}catch{return o.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),o}let i=a.runtime??{},c=j$2(t);k$2(c,t)&&!i.go?.version?o.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):l(c,t)&&!i.node?.version?o.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):m$2(c,t)&&!i.java?.version?o.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):n$1(c,t)&&!i.dotnet?.version?o.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):o$2(c,t)&&!i.python?.version&&o.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let l=t$1(e,"workspace.json").find(b=>O.existsSync(b));if(!l)throw new Error("workspace manifest missing");let g=JSON.parse(await O.promises.readFile(l,"utf-8")).profile??"",u=m$3(t,c),f=o$3({profile:g,runtime:u.runtime,subjectLabel:P.basename(t),mode:"strict"});f.ok||o.push(`${f.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return o}async function Uf(){let t=async m=>{if(!b$2()||!m.toLowerCase().endsWith(".cmd"))return  false;try{let y=(await M__default.readFile(m,"utf8")).replace(/\r\n/g,`
-`).toLowerCase(),h=y.includes("\\.rapidkit\\rapidkit"),v=y.includes("\\.rapidkit\\rapidkit.cmd")||y.includes("\\.rapidkit\\rapidkit.exe")||y.includes("\\.venv\\scripts\\rapidkit.exe");return h&&!v}catch{return  false}},e$1=process.cwd(),r=process.argv.slice(2),o=r[0],n=o==="init",a=new Set(r$3),i=!o||o==="--help"||o==="-h"||o==="help",c=ot(e$1),l$1=u(e$1,"project.json").some(m=>O.existsSync(m)),p=j$2(e$1),g=await zt(e$1),u$1=k$2(p,e$1)||l(p,e$1)||o$2(p,e$1)||m$2(p,e$1)||n$1(p,e$1)||h$4(g??void 0),f=!!o&&a.has(o)&&u$1,b=process.env.RAPIDKIT_LOCAL_LAUNCHER_BYPASS==="1";if(lo(r)||r[0]==="create")return  false;if(Es(r))return  true;if(r[0]==="init"&&c&&!l$1)return  false;if(As(r))return  true;try{let m=o==="shell"&&r[1]==="activate",w=o==="create",y=await yl(e$1,{cwd:e$1,timeoutMs:1200});if(y.ok&&y.data?.isRapidkitProject&&y.data.engine==="python"){let h=w||lo(r);if(!i&&!m&&!h&&!n&&!f&&ma(r)){if(o&&Ld.includes(o)){let x=await Ud(e$1).catch(()=>[]);if(x.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let R of x)process.stderr.write(s.red(`  \u2022 ${R}`)+`
-`);process.exit(1);}}let v=await e$2(process.argv.slice(2),{cwd:e$1});process.exit(v);}}}catch{}let k=Qd(e$1),S=b$2(),A=b?[]:p$3(e$1),E=null;for(let m of A)if(await M__default.pathExists(m)){if(await t(m)){e.warn(`Skipping legacy/broken Windows launcher candidate: ${m}. Falling back to core bridge.`);continue}E=m;break}let d=o==="create";if(o==="init"&&c&&!l$1)return  false;if(o&&Ld.includes(o)){let m=await Ud(e$1);if(m.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
+`),1):(console.log(s.yellow("Usage: workspai workspace policy set <key> <value>")),console.log(s.gray("Allowed keys:")),console.log(s.gray("  mode (warn|strict)")),console.log(s.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(s.gray("  rules.enforce_workspace_marker (true|false)")),console.log(s.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(s.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(s.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(s.gray("  rules.require_mirror_lock_for_offline (true|false)")),1);let c=r.trim(),p=await nu(t);if(c==="mode"){let u=o.trim().toLowerCase();if(u!=="warn"&&u!=="strict")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_mode",message:"Invalid mode. Use: warn | strict"}},null,2)}
+`),1):(console.log(s.red("\u274C Invalid mode. Use: warn | strict")),1);p=ou(p,"mode",`${u} # "warn" or "strict"`);}else if(c==="dependency_sharing_mode"){let u=o.trim().toLowerCase();if(u!=="isolated"&&u!=="shared-runtime-caches"&&u!=="shared-node-deps")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_dependency_sharing_mode",message:"Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps"}},null,2)}
+`),1):(console.log(s.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1);p=ou(p,"dependency_sharing_mode",`${u} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(c.startsWith("rules.")){let u=c.slice(6);if(!(u in uu))return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_rule",message:`Unknown policy rule: ${u}`}},null,2)}
+`),1):(console.log(s.red(`\u274C Unknown policy rule: ${u}`)),1);let g=qf(o);if(g===null)return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_boolean",message:"Rule values must be boolean: true | false"}},null,2)}
+`),1):(console.log(s.red("\u274C Rule values must be boolean: true | false")),1);p=Hf(p,u,g);}else return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_key",message:`Unknown policy key: ${c}`}},null,2)}
+`),1):(console.log(s.red(`\u274C Unknown policy key: ${c}`)),1);await Uf(t,p);let f=ru(p);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,updatedKey:c,policy:f},null,2)}
+`),0):(console.log(s.green(`\u2705 Updated ${c} in .workspai/policies.yml`)),console.log(s.gray(`  mode: ${f.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${f.dependency_sharing_mode}`)),console.log(s.gray("  Tip: run `npx workspai workspace policy show` to inspect all values.")),0)}async function sh(t$2){if(t$2.includes("--help")||t$2.includes("-h"))return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),0;let e=(t$2[1]||"status").toLowerCase(),r=t$2.includes("--json"),o=Ae(process.cwd());if(!o)return console.log(s.red("\u274C Not inside a Workspai workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let n=t$1(o,"mirror-config.json").find(u=>$.existsSync(u))??q$1(o,"mirror-config.json"),a=t$1(o,"mirror.lock").find(u=>$.existsSync(u))??q$1(o,"mirror.lock"),i=q$1(o,"mirror","artifacts"),c=q$1(o,"reports");async function l(u){if(!await M__default.pathExists(u))return 0;let g=0,j=[u];for(;j.length>0;){let y=j.shift();if(!y)continue;let S=await $.promises.readdir(y,{withFileTypes:true});for(let E of S)E.isFile()?g+=1:E.isDirectory()&&j.push(b.join(y,E.name));}return g}async function p(u){let g=new Date().toISOString().replace(/[:.]/g,"-"),j=b.join(c,`mirror-ops-${g}.json`),y=b.join(c,"mirror-ops.latest.json"),S={schemaVersion:s$2.mirrorOps.schemaVersion,...u};b$r(`.workspai/reports/${b.basename(j)}`,S),b$r(t.mirrorOps,S),await M__default.ensureDir(c),await Jn(j,S),await Jn(y,S);}async function f(){let u=await M__default.pathExists(n),g=await M__default.pathExists(a),j=await l(i);return {configExists:u,lockExists:g,artifactsCount:j}}if(e==="status"){let u=await M__default.pathExists(n),g=await M__default.pathExists(a),j=await l(i),y={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:{configExists:u,lockExists:g,artifactsCount:j}};return await p(y),r?(process.stdout.write(`${JSON.stringify(y,null,2)}
+`),0):(console.log(s.cyan("Workspai mirror status")),console.log(s.gray(`Workspace: ${o}`)),console.log(s.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(s.gray(`Lock: ${g?"present":"missing"} (${a})`)),console.log(s.gray(`Artifacts: ${j}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let u=await gs(o,{ciMode:true,offlineMode:e==="verify",forceRun:true}),g=u.checks.filter(S=>S.status==="failed"),j=u.checks.some(S=>S.id.startsWith("mirror.verify.")&&S.status==="failed");if(e==="verify"&&j){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await f(),details:u.details,checks:u.checks};if(await p(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
+`),1;console.log(s.red("\u274C Mirror verify failed."));for(let E of u.checks.filter(R=>R.id.startsWith("mirror.verify.")))console.log(s.gray(`- ${E.id}: ${E.message}`));return 1}if(g.length>0){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await f(),details:u.details,checks:u.checks};if(await p(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
+`),1;console.log(s.yellow(`\u26A0\uFE0F  Mirror ${e} completed with ${g.length} issue(s).`));for(let E of g)console.log(s.gray(`- ${E.id}: ${E.message}`));return 1}let y={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:await f(),details:u.details,checks:u.checks};return await p(y),r?(process.stdout.write(`${JSON.stringify(y,null,2)}
+`),0):e==="rotate"?(console.log(s.green(`\u2705 Mirror rotate completed. Rotated files: ${u.details.rotatedFiles}.`)),0):e==="verify"?(console.log(s.green(`\u2705 Mirror verify completed. Verified artifacts: ${u.details.verifiedArtifacts}.`)),0):(console.log(s.green(`\u2705 Mirror sync completed. Synced artifacts: ${u.details.syncedArtifacts}.`)),0)}return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function Vs(t){let e=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let r=process.cwd(),o=await fu(r,async()=>{let n=Ae(r),a=Xe("python",{runCommandInCwd:Re,runCoreRapidkit:e$2}),i=Xe("dotnet",{runCommandInCwd:Re,runCoreRapidkit:e$2}),c$1=Xe("rust",{runCommandInCwd:Re,runCoreRapidkit:e$2}),l$1=Xe("php",{runCommandInCwd:Re,runCoreRapidkit:e$2}),p=t.slice(1).filter(E=>!E.startsWith("-"));if(p.length>0){let E=b.resolve(r,p[0]),R=j$2(E),d=await Xt(E);return k$2(R,E)||d==="go"?await As(E):m$2(R,E)||d==="java"?await Ct("init",E):n$1(R,E)||d==="dotnet"?ce(await i.initProject(E)):l(R,E)||d==="node"?await Ss(E):o$2(R,E)||d==="python"?await Cs(E,a):d==="rust"?ce(await c$1.initProject(E)):d==="php"?ce(await l$1.initProject(E)):await e$2(t,{cwd:r})}let f=j$2(r),u=!!Ae(r)&&r===Ae(r);if(!u&&k$2(f,r))return await As(r);let g=await Xt(r);if(!u&&(m$2(f,r)||g==="java"))return await Ct("init",r);if(!u&&(n$1(f,r)||g==="dotnet"))return ce(await i.initProject(r));if(!u&&(l(f,r)||g==="node"))return await Ss(r);if(!u&&(o$2(f,r)||g==="python"))return await Cs(r,a);if(!u&&g==="rust")return ce(await c$1.initProject(r));if(!u&&g==="php")return ce(await l$1.initProject(r));let j=n||Ae(r),y=du(r),S=y?b.dirname(b.dirname(y)):null;if(S&&S!==j){let E=j$2(S),R=await Xt(S);return k$2(E,S)||R==="go"?await As(S):m$2(E,S)||R==="java"?await Ct("init",S):n$1(E,S)||R==="dotnet"?ce(await i.initProject(S)):l(E,S)||R==="node"?await Ss(S):o$2(E,S)||R==="python"?await Cs(S,a):R==="rust"?ce(await c$1.initProject(S)):R==="php"?ce(await l$1.initProject(S)):await e$2(["init"],{cwd:S})}if(j&&r===j){console.log(s.yellow("\u26A0\uFE0F  Running `npx workspai init` at workspace root.")),console.log(s.gray("   Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n   workspace-profile dependencies first, then project dependency initialization.\n"));let E=await Fs(j);if(E!==0)return E;let{runWorkspaceStage:R}=await import('./workspace-run-X7KV6MIT.js');return (await R({workspacePath:j,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:true,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!j){let E=await c(),R=l$7(),{name:d}=eh(R);await M__default.ensureDir(R);let{createProject:m}=await import('./create-P4XJVZCL.js');return await m(d,{yes:true,userConfig:E,parentDirectory:R}),0}return await e$2(t,{cwd:r})});return o.ok?o.value:o.code}finally{typeof e>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e;}}async function au(t){let e=Ae(t);if(!e)return [];let r="warn";try{let l=t$1(e,"policies.yml").find(u=>$.existsSync(u));if(!l)return [];let p=await $.promises.readFile(l,"utf-8");(p.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??p.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(r="strict");}catch{return []}if(r!=="strict")return [];let o=[],n=t$1(e,"toolchain.lock").find(l=>$.existsSync(l));if(!n||!$.existsSync(n))return o.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),o;let a={};try{a=JSON.parse(await $.promises.readFile(n,"utf-8"));}catch{return o.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),o}let i=a.runtime??{},c=j$2(t);k$2(c,t)&&!i.go?.version?o.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):l(c,t)&&!i.node?.version?o.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):m$2(c,t)&&!i.java?.version?o.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):n$1(c,t)&&!i.dotnet?.version?o.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):o$2(c,t)&&!i.python?.version&&o.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let l=t$1(e,"workspace.json").find(j=>$.existsSync(j));if(!l)throw new Error("workspace manifest missing");let f=JSON.parse(await $.promises.readFile(l,"utf-8")).profile??"",u=m$3(t,c),g=o$3({profile:f,runtime:u.runtime,subjectLabel:b.basename(t),mode:"strict"});g.ok||o.push(`${g.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return o}async function ih(){let t=async m=>{if(!b$3()||!m.toLowerCase().endsWith(".cmd"))return  false;try{let k=(await M__default.readFile(m,"utf8")).replace(/\r\n/g,`
+`).toLowerCase(),h=k.includes("\\.rapidkit\\rapidkit"),v=k.includes("\\.rapidkit\\rapidkit.cmd")||k.includes("\\.rapidkit\\rapidkit.exe")||k.includes("\\.venv\\scripts\\rapidkit.exe");return h&&!v}catch{return  false}},e$1=process.cwd(),r=process.argv.slice(2),o=r[0],n=o==="init",a=new Set(r$3),i=!o||o==="--help"||o==="-h"||o==="help",c=Qe(e$1),l$1=u(e$1,"project.json").some(m=>$.existsSync(m)),p=j$2(e$1),f=await Xt(e$1),u$1=k$2(p,e$1)||l(p,e$1)||o$2(p,e$1)||m$2(p,e$1)||n$1(p,e$1)||h$4(f??void 0),g=!!o&&a.has(o)&&u$1,j=process.env.RAPIDKIT_LOCAL_LAUNCHER_BYPASS==="1";if(go(r)||r[0]==="create")return  false;if(Ts(r))return  true;if(r[0]==="init"&&c&&!l$1)return  false;if(Ms(r))return  true;try{let m=o==="shell"&&r[1]==="activate",w=o==="create",k=await El(e$1,{cwd:e$1,timeoutMs:1200});if(k.ok&&k.data?.isRapidkitProject&&k.data.engine==="python"){let h=w||go(r);if(!i&&!m&&!h&&!n&&!g&&va(r)){if(o&&Qd.includes(o)){let I=await au(e$1).catch(()=>[]);if(I.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let x of I)process.stderr.write(s.red(`  \u2022 ${x}`)+`
+`);process.exit(1);}}let v=await e$2(process.argv.slice(2),{cwd:e$1});process.exit(v);}}}catch{}let y=du(e$1),S=b$3(),E=j?[]:p$3(e$1),R=null;for(let m of E)if(await M__default.pathExists(m)){if(await t(m)){e.warn(`Skipping legacy/broken Windows launcher candidate: ${m}. Falling back to core bridge.`);continue}R=m;break}let d=o==="create";if(o==="init"&&c&&!l$1)return  false;if(o&&Qd.includes(o)){let m=await au(e$1);if(m.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
 `);for(let w of m)process.stderr.write(s.red(`  \u2022 ${w}`)+`
-`);process.exit(1);}}if(E&&o&&Dd.includes(o)&&!d&&!n&&!f){e.debug(`Delegating to local CLI: ${E} ${r.join(" ")}`);let m=o==="init"?js():process.env,w=spawn(E,r,{stdio:"inherit",cwd:e$1,shell:S,env:m});return w.on("close",y=>{process.exit(y??0);}),w.on("error",y=>{e.error(`Failed to run local rapidkit: ${y.message}`),process.exit(1);}),true}if(k&&await M__default.pathExists(k))try{let m=await M__default.readJson(k);if(vl(m.engine)){let w=r[0],y=b?[]:p$3(e$1),h=null;for(let v of y)if(await M__default.pathExists(v)){if(await t(v)){e.warn(`Skipping legacy/broken Windows launcher candidate: ${v}. Falling back to core bridge.`);continue}h=v;break}if(h&&w&&Dd.includes(w)&&w!=="init"&&!f){e.debug(`Delegating to local CLI (early detection): ${h} ${r.join(" ")}`);let v=w==="init"?js():process.env,x=spawn(h,r,{stdio:"inherit",cwd:e$1,shell:S,env:v});return x.on("close",R=>process.exit(R??0)),x.on("error",R=>{e.error(`Failed to run local rapidkit: ${R.message}`),process.exit(1);}),true}if(w==="shell"&&r[1]==="activate"){let v=b$2()?`# RapidKit Core activation snippet (PowerShell)
+`);process.exit(1);}}if(R&&o&&Xd.includes(o)&&!d&&!n&&!g){e.debug(`Delegating to local CLI: ${R} ${r.join(" ")}`);let m=o==="init"?_s():process.env,w=spawn(R,r,{stdio:"inherit",cwd:e$1,shell:S,env:m});return w.on("close",k=>{process.exit(k??0);}),w.on("error",k=>{e.error(`Failed to run local rapidkit: ${k.message}`),process.exit(1);}),true}if(y&&await M__default.pathExists(y))try{let m=await M__default.readJson(y);if(Rl(m.engine)){let w=r[0],k=j?[]:p$3(e$1),h=null;for(let v of k)if(await M__default.pathExists(v)){if(await t(v)){e.warn(`Skipping legacy/broken Windows launcher candidate: ${v}. Falling back to core bridge.`);continue}h=v;break}if(h&&w&&Xd.includes(w)&&w!=="init"&&!g){e.debug(`Delegating to local CLI (early detection): ${h} ${r.join(" ")}`);let v=w==="init"?_s():process.env,I=spawn(h,r,{stdio:"inherit",cwd:e$1,shell:S,env:v});return I.on("close",x=>process.exit(x??0)),I.on("error",x=>{e.error(`Failed to run local rapidkit: ${x.message}`),process.exit(1);}),true}if(w==="shell"&&r[1]==="activate"){let v=b$3()?`# RapidKit Core activation snippet (PowerShell)
 $venv = ".venv"
 if (Test-Path "$venv\\Scripts\\Activate.ps1") { . "$venv\\Scripts\\Activate.ps1" }
 $env:RAPIDKIT_PROJECT_ROOT = (Get-Location).Path
@@ -372,27 +372,27 @@ export PATH="$(pwd)/.workspai:$(pwd)/.rapidkit:$(pwd):$PATH"
 \u2705 Activation snippet \u2014 run the following to activate this project in your current shell:
 `)),console.log(v),console.log(s.gray(`
 \u{1F4A1} After activation you can run: workspai dev
-`)),process.exit(0);}if(!i&&!lo(r)&&w!=="init"&&!f&&ma(r)){let v=await e$2(r,{cwd:e$1});process.exit(v);}}}catch{}return  false}var Dt=null,$n=false,Bf=rf(),Ns="workspai",ks="npx workspai",he=new Command;he.enablePositionalOptions();var qf=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function zf(t){if(t.length===0)return  false;let e=t[0],r=t[1];if(F$1(t)||vf.includes(e))return  false;if(s$4.includes(e)){if(e==="lint"||e==="format"){let n=j$2(process.cwd()),a=await zt(process.cwd());if(l(n,process.cwd())||a==="node"){let i=m$3(process.cwd(),n);if(u$1(process.cwd(),e,{framework:i.key})!==null)return  false}if(o$2(n,process.cwd())||a==="python")return  true;if(C(process.cwd()))return  false}return  true}if(lo(t)||e==="shell"&&r==="activate")return  false;if(t.includes("--tui"))return  true;if(e==="--help"||e==="-h"||e==="help"||e==="version"||e==="--version"||e==="-V"||e==="-v"||t.includes("--template")||t.includes("-t"))return  false;let o=await i$3();return ua(e,o)?true:t.some(n=>da.has(n))?false:o?o.has(e):!!(a$5.has(e)||t.length>1)}he.name(Ns).description("Workspai workspace intelligence CLI").version(h());he.addHelpText("beforeAll",`Workspai CLI
+`)),process.exit(0);}if(!i&&!go(r)&&w!=="init"&&!g&&va(r)){let v=await e$2(r,{cwd:e$1});process.exit(v);}}}catch{}return  false}var Dt=null,Ln=false,ch=hf(),Js="workspai",xs="npx workspai",he=new Command;he.enablePositionalOptions();var lh=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function ph(t){if(t.length===0)return  false;let e=t[0],r=t[1];if(F$1(t)||Tf.includes(e))return  false;if(s$4.includes(e)){if(e==="lint"||e==="format"){let n=j$2(process.cwd()),a=await Xt(process.cwd());if(l(n,process.cwd())||a==="node"){let i=m$3(process.cwd(),n);if(u$1(process.cwd(),e,{framework:i.key})!==null)return  false}if(o$2(n,process.cwd())||a==="python")return  true;if(C(process.cwd()))return  false}return  true}if(go(t)||e==="shell"&&r==="activate")return  false;if(t.includes("--tui"))return  true;if(e==="--help"||e==="-h"||e==="help"||e==="version"||e==="--version"||e==="-V"||e==="-v"||t.includes("--template")||t.includes("-t"))return  false;let o=await i$3();return ka(e,o)?true:t.some(n=>ya.has(n))?false:o?o.has(e):!!(a$5.has(e)||t.length>1)}he.name(Js).description("Workspai workspace intelligence CLI").version(h());he.addHelpText("beforeAll",`Workspai CLI
 
 Workspace Intelligence for software systems.
 `);he.addHelpText("afterAll",`
 Discover more:
-  ${Ns} --help          Product overview and first steps
-  ${Ns} commands --json Complete machine-readable command inventory
+  ${Js} --help          Product overview and first steps
+  ${Js} commands --json Complete machine-readable command inventory
   https://workspai.dev             Guides, contracts, and examples
-`);he.command("live [target]").description("Open a live cross-terminal execution graph for Workspai activity").option("--global","Monitor activity across all local Workspai projects and workspaces").option("--run <runId>","Show only one activity run").option("--once","Render one snapshot and exit").option("--json","Emit monitor snapshots as JSON").addOption(new Option("--projection <projection>","JSON projection: monitor or renderer-neutral board").choices(["monitor","board"]).default("monitor")).option("--refresh-ms <milliseconds>","Live refresh interval (100-5000ms)","250").option("--max-runs <count>","Maximum runs rendered in the terminal","6").option("--max-scopes <count>","Maximum local scopes discovered by --global","12").option("--classic","Use the compatibility line-oriented renderer").option("--no-color","Disable terminal colors").option("--no-motion","Disable animated flow indicators").option("--ascii","Use ASCII-only symbols and connectors").option("--accessible","Use a stable screen-reader-friendly linear view").option("--capture <file>","Write a deterministic product-ready SVG snapshot and exit").option("--capture-preset <preset>","Capture size: github, linkedin, x, square, wide","github").option("--capture-theme <theme>","Capture theme: obsidian, light, mono","obsidian").option("--no-capture-redact","Keep local workspace, project, run and argument labels in capture").option("--replay <runId>","Replay a durable activity run with pause and step controls").option("--replay-speed <multiplier>","Replay speed from 0.25 to 64","4").action(async(t,e)=>{let r=Number.parseInt(e.refreshMs??"250",10),o=Number.parseInt(e.maxRuns??"6",10),n=Number.parseInt(e.maxScopes??"12",10),a=Number.parseFloat(e.replaySpeed??"4");if(!Number.isFinite(r)||r<100||r>5e3)throw new Error("--refresh-ms must be an integer from 100 to 5000.");if(!Number.isFinite(o)||o<1||o>50)throw new Error("--max-runs must be an integer from 1 to 50.");if(!Number.isFinite(n)||n<1||n>50)throw new Error("--max-scopes must be an integer from 1 to 50.");if(!Number.isFinite(a)||a<.25||a>64)throw new Error("--replay-speed must be a number from 0.25 to 64.");if(e.projection==="board"&&e.json!==true)throw new Error("--projection board requires --json.");if(e.projection==="board"&&e.capture)throw new Error("--projection board cannot be combined with --capture; capture already uses the Activity Board internally.");if(e.global===true&&t)throw new Error("A target path cannot be combined with --global.");if(e.replay&&e.global===true)throw new Error("--replay cannot be combined with --global.");if(e.replay&&e.capture)throw new Error("--replay cannot be combined with --capture.");if(!["github","linkedin","x","square","wide"].includes(e.capturePreset??""))throw new Error("--capture-preset must be github, linkedin, x, square, or wide.");if(!["obsidian","light","mono"].includes(e.captureTheme??""))throw new Error("--capture-theme must be obsidian, light, or mono.");let{runLiveCommand:i}=await import('./live-command-GNAASZ7U.js');await i({targetPath:t,runId:e.run,once:e.once===true,json:e.json===true,projection:e.projection??"monitor",refreshMs:r,maxRuns:o,classic:e.classic===true,color:e.color===false?false:void 0,motion:e.motion===false?false:void 0,ascii:e.ascii===true?true:void 0,accessible:e.accessible===true,global:e.global===true,maxScopes:n,capturePath:e.capture,capturePreset:e.capturePreset,captureTheme:e.captureTheme,captureRedact:e.captureRedact!==false,replayRunId:e.replay,replaySpeed:a});});he.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs, springboot, gofiber, gogin, dotnet) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").option("--here","Create workspace in the current directory (same as --output .)").option("--output <dir>","Parent directory for the new workspace folder").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-python-engine","Create a Python-aware workspace without installing rapidkit-core now").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, java-only, python-only, node-only, go-only, dotnet-only, polyglot, enterprise").choices(["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not link it to any workspace").hideHelp()).option("--no-update-check","Skip checking for updates").option("--trust-config","Trust and execute workspai.config.js/mjs/cjs discovered in this tree").action(async(t,e$3)=>{try{e$3.debug&&(e.setDebug(true),e.debug("Debug mode enabled"));let r=await c();e.debug("User config loaded",{...r,openaiApiKey:r.openaiApiKey?"[REDACTED]":void 0});let o=await d(process.cwd(),{trustExecutableConfig:e$3.trustConfig===true||process.env.WORKSPAI_TRUST_CONFIG==="1"});e.debug("Workspai config loaded",o);let n$1=e$1(r,o,{author:e$3.author,pythonVersion:void 0,skipGit:e$3.skipGit});e.debug("Merged config",n$1),e$3.updateCheck!==false&&await g(),a("workspace"),t||(iu(),process.exit(0));try{j(t);}catch(l){throw l instanceof a$1&&(e.error(`
+`);he.command("live [target]").description("Open a live cross-terminal execution graph for Workspai activity").option("--global","Monitor activity across all local Workspai projects and workspaces").option("--run <runId>","Show only one activity run").option("--once","Render one snapshot and exit").option("--json","Emit monitor snapshots as JSON").addOption(new Option("--projection <projection>","JSON projection: monitor or renderer-neutral board").choices(["monitor","board"]).default("monitor")).option("--refresh-ms <milliseconds>","Live refresh interval (100-5000ms)","250").option("--max-runs <count>","Maximum runs rendered in the terminal","6").option("--max-scopes <count>","Maximum local scopes discovered by --global","12").option("--classic","Use the compatibility line-oriented renderer").option("--no-color","Disable terminal colors").option("--no-motion","Disable animated flow indicators").option("--ascii","Use ASCII-only symbols and connectors").option("--accessible","Use a stable screen-reader-friendly linear view").option("--capture <file>","Write a deterministic product-ready SVG snapshot and exit").option("--capture-preset <preset>","Capture size: github, linkedin, x, square, wide","github").option("--capture-theme <theme>","Capture theme: obsidian, light, mono","obsidian").option("--no-capture-redact","Keep local workspace, project, run and argument labels in capture").option("--replay <runId>","Replay a durable activity run with pause and step controls").option("--replay-speed <multiplier>","Replay speed from 0.25 to 64","4").action(async(t,e)=>{let r=Number.parseInt(e.refreshMs??"250",10),o=Number.parseInt(e.maxRuns??"6",10),n=Number.parseInt(e.maxScopes??"12",10),a=Number.parseFloat(e.replaySpeed??"4");if(!Number.isFinite(r)||r<100||r>5e3)throw new Error("--refresh-ms must be an integer from 100 to 5000.");if(!Number.isFinite(o)||o<1||o>50)throw new Error("--max-runs must be an integer from 1 to 50.");if(!Number.isFinite(n)||n<1||n>50)throw new Error("--max-scopes must be an integer from 1 to 50.");if(!Number.isFinite(a)||a<.25||a>64)throw new Error("--replay-speed must be a number from 0.25 to 64.");if(e.projection==="board"&&e.json!==true)throw new Error("--projection board requires --json.");if(e.projection==="board"&&e.capture)throw new Error("--projection board cannot be combined with --capture; capture already uses the Activity Board internally.");if(e.global===true&&t)throw new Error("A target path cannot be combined with --global.");if(e.replay&&e.global===true)throw new Error("--replay cannot be combined with --global.");if(e.replay&&e.capture)throw new Error("--replay cannot be combined with --capture.");if(!["github","linkedin","x","square","wide"].includes(e.capturePreset??""))throw new Error("--capture-preset must be github, linkedin, x, square, or wide.");if(!["obsidian","light","mono"].includes(e.captureTheme??""))throw new Error("--capture-theme must be obsidian, light, or mono.");let{runLiveCommand:i}=await import('./live-command-GNAASZ7U.js');await i({targetPath:t,runId:e.run,once:e.once===true,json:e.json===true,projection:e.projection??"monitor",refreshMs:r,maxRuns:o,classic:e.classic===true,color:e.color===false?false:void 0,motion:e.motion===false?false:void 0,ascii:e.ascii===true?true:void 0,accessible:e.accessible===true,global:e.global===true,maxScopes:n,capturePath:e.capture,capturePreset:e.capturePreset,captureTheme:e.captureTheme,captureRedact:e.captureRedact!==false,replayRunId:e.replay,replaySpeed:a});});he.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs, springboot, gofiber, gogin, dotnet) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").option("--here","Create workspace in the current directory (same as --output .)").option("--output <dir>","Parent directory for the new workspace folder").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-python-engine","Create a Python-aware workspace without installing rapidkit-core now").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, java-only, python-only, node-only, go-only, dotnet-only, polyglot, enterprise").choices(["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not link it to any workspace").hideHelp()).option("--no-update-check","Skip checking for updates").option("--trust-config","Trust and execute workspai.config.js/mjs/cjs discovered in this tree").action(async(t,e$3)=>{try{e$3.debug&&(e.setDebug(true),e.debug("Debug mode enabled"));let r=await c();e.debug("User config loaded",{...r,openaiApiKey:r.openaiApiKey?"[REDACTED]":void 0});let o=await d(process.cwd(),{trustExecutableConfig:e$3.trustConfig===true||process.env.WORKSPAI_TRUST_CONFIG==="1"});e.debug("Workspai config loaded",o);let n$1=e$1(r,o,{author:e$3.author,pythonVersion:void 0,skipGit:e$3.skipGit});e.debug("Merged config",n$1),e$3.updateCheck!==false&&await g(),a("workspace"),t||(ku(),process.exit(0));try{j(t);}catch(l){throw l instanceof a$1&&(e.error(`
 \u274C ${l.message}`),l.details&&e.warn(`\u{1F4A1} ${l.details}
-`),process.exit(1)),l}let a$2=!!e$3.template,i$1;a$2||(e$3.here?i$1=process.cwd():e$3.output?i$1=P.resolve(e$3.output):i$1=await k([],{hasYes:e$3.yes}));let c$1=a$2?P.resolve(process.cwd(),t):i(t,{outputParent:i$1});if(Dt=c$1,!e$3.dryRun){a$2||await M__default.ensureDir(P.dirname(c$1));let l=a$2?void 0:n(t);(!a$2&&j$1(l,c$1,{outputParent:i$1})&&l&&await M__default.pathExists(l)||await M__default.pathExists(c$1))&&(e.error(`
+`),process.exit(1)),l}let a$2=!!e$3.template,i$1;a$2||(e$3.here?i$1=process.cwd():e$3.output?i$1=b.resolve(e$3.output):i$1=await k([],{hasYes:e$3.yes}));let c$1=a$2?b.resolve(process.cwd(),t):i(t,{outputParent:i$1});if(Dt=c$1,!e$3.dryRun){a$2||await M__default.ensureDir(b.dirname(c$1));let l=a$2?void 0:n(t);(!a$2&&j$1(l,c$1,{outputParent:i$1})&&l&&await M__default.pathExists(l)||await M__default.pathExists(c$1))&&(e.error(`
 \u274C Directory "${t}" already exists`),l&&l!==c$1&&console.log(s.gray(`   Found at: ${l}`)),console.log(s.cyan(`
 \u{1F4A1} Choose a different name or delete the existing directory.
 `)),process.exit(1));}if(e$3.dryRun){console.log(s.cyan(`
 \u{1F50D} Dry-run mode - showing what would be created:
-`)),console.log(s.white("\u{1F4C2} Path:"),c$1),console.log(s.white("\u{1F4E6} Type:"),a$2?`Project (${e$3.template})`:"Workspace"),console.log();return}if(!e$3.yes&&!a$2?await b([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"Workspai User"}]):e$3.yes&&console.log(s.gray(`Using default values (--yes flag)
-`)),a$2){let l=String(e$3.template||"").trim(),p=b$1(l);if(d$1(p)){let d=await bs(["create","project",p,t,...e$3.skipGit?["--skip-git"]:[],...e$3.skipInstall?["--skip-install"]:[]]);d!==0&&process.exit(d);return}if(!!!Rs(process.cwd())){let{registerWorkspaceAtPath:d}=await import('./create-7UENFCJK.js');if(e$3.createWorkspace)await d(process.cwd(),{skipGit:e$3.skipGit,yes:e$3.yes,userConfig:r});else if(!e$3.noWorkspace)if(e$3.yes)await d(process.cwd(),{skipGit:e$3.skipGit,yes:true,userConfig:r});else {let{createWs:m}=await b([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);m&&await d(process.cwd(),{skipGit:e$3.skipGit,yes:false,userConfig:r});}}let u=["create","project",p,t,"--output",process.cwd()];e$3.yes&&u.push("--yes");let f$1=Ie(process.cwd()),b$2=!!e$3.skipInstall,k=b$2||!!f$1;b$2&&u.push("--skip-essentials");let S=k?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,A=await f(u,{cwd:process.cwd(),env:S});A!==0&&process.exit(A),f$1&&!e$3.skipInstall&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init")));let E=Rs(process.cwd());if(E){let d=P.dirname(E),m=P.join(d,".python-version"),w=P.join(c$1,".python-version");try{if(await M__default.pathExists(m)){let y=O.readFileSync(m,"utf-8");O.writeFileSync(w,y.trim()+`
-`),e.debug(`Synced Python version ${y.trim()} from workspace to project`);}}catch(y){e.debug("Could not sync Python version from workspace:",y);}}if(!e$3.skipInstall){let d=await e$2(["init",c$1],{cwd:process.cwd()});if(d!==0&&process.exit(d),E){let m=P.dirname(E),w=P.join(m,".python-version"),y=P.join(c$1,".python-version");try{if(await M__default.pathExists(w)){let h=O.readFileSync(w,"utf-8");O.writeFileSync(y,h.trim()+`
-`),e.debug(`Re-synced Python version ${h.trim()} after init`);}}catch(h){e.debug("Could not re-sync Python version after init:",h);}}}}else {let{createProject:l}=await import('./create-7UENFCJK.js');await l(t,{skipGit:e$3.skipGit,skipPythonEngine:e$3.skipPythonEngine,dryRun:e$3.dryRun,yes:e$3.yes,userConfig:n$1,installMethod:e$3.installMethod,profile:e$3.profile,parentDirectory:P.dirname(c$1)});}}catch(r){r instanceof a$1?(e.error(`
+`)),console.log(s.white("\u{1F4C2} Path:"),c$1),console.log(s.white("\u{1F4E6} Type:"),a$2?`Project (${e$3.template})`:"Workspace"),console.log();return}if(!e$3.yes&&!a$2?await b$1([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"Workspai User"}]):e$3.yes&&console.log(s.gray(`Using default values (--yes flag)
+`)),a$2){let l=String(e$3.template||"").trim(),p=b$2(l);if(d$1(p)){let d=await Os(["create","project",p,t,...e$3.skipGit?["--skip-git"]:[],...e$3.skipInstall?["--skip-install"]:[]]);d!==0&&process.exit(d);return}if(!!!Ws(process.cwd())){let{registerWorkspaceAtPath:d}=await import('./create-P4XJVZCL.js');if(e$3.createWorkspace)await d(process.cwd(),{skipGit:e$3.skipGit,yes:e$3.yes,userConfig:r});else if(!e$3.noWorkspace)if(e$3.yes)await d(process.cwd(),{skipGit:e$3.skipGit,yes:true,userConfig:r});else {let{createWs:m}=await b$1([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);m&&await d(process.cwd(),{skipGit:e$3.skipGit,yes:false,userConfig:r});}}let u=["create","project",p,t,"--output",process.cwd()];e$3.yes&&u.push("--yes");let g=Ae(process.cwd()),j=!!e$3.skipInstall,y=j||!!g;j&&u.push("--skip-essentials");let S=y?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,E=await f(u,{cwd:process.cwd(),env:S});E!==0&&process.exit(E),g&&!e$3.skipInstall&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init")));let R=Ws(process.cwd());if(R){let d=b.dirname(R),m=b.join(d,".python-version"),w=b.join(c$1,".python-version");try{if(await M__default.pathExists(m)){let k=$.readFileSync(m,"utf-8");$.writeFileSync(w,k.trim()+`
+`),e.debug(`Synced Python version ${k.trim()} from workspace to project`);}}catch(k){e.debug("Could not sync Python version from workspace:",k);}}if(!e$3.skipInstall){let d=await e$2(["init",c$1],{cwd:process.cwd()});if(d!==0&&process.exit(d),R){let m=b.dirname(R),w=b.join(m,".python-version"),k=b.join(c$1,".python-version");try{if(await M__default.pathExists(w)){let h=$.readFileSync(w,"utf-8");$.writeFileSync(k,h.trim()+`
+`),e.debug(`Re-synced Python version ${h.trim()} after init`);}}catch(h){e.debug("Could not re-sync Python version after init:",h);}}}}else {let{createProject:l}=await import('./create-P4XJVZCL.js');await l(t,{skipGit:e$3.skipGit,skipPythonEngine:e$3.skipPythonEngine,dryRun:e$3.dryRun,yes:e$3.yes,userConfig:n$1,installMethod:e$3.installMethod,profile:e$3.profile,parentDirectory:b.dirname(c$1)});}}catch(r){r instanceof a$1?(e.error(`
 \u274C ${r.message}`),r.details&&e.warn(`\u{1F4A1} ${r.details}`),e.debug("Error code:",r.code)):(e.error(`
-\u274C An unexpected error occurred:`),console.error(r)),process.exit(1);}finally{Dt=null;}});Fl(he);xp(he);Ul(he);Ep(he);he.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{Ef({json:t.json});});he.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:r}=await import('./analyze-FRQVJ3VJ.js'),o=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(o,null,2)):r(o),o.summary.verdict==="blocked"&&process.exit(2);}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:"analyze",code:"analyze.failed",message:r}),null,2)):console.error(s.red(`Analyze failed: ${r}`)),process.exit(1);}});jl(he);he.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(s.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function r(l){let p=l;for(;;){let g=u(p,"context.json").find(f=>O.existsSync(f));if(g)return g;let u$1=P.dirname(p);if(u$1===p)break;p=u$1;}return null}let o$1=r(e);function n(l){let p=l;for(;;){let g=P.join(p,".venv"),u=[P.join(p,".workspai","activate"),P.join(p,".rapidkit","activate")].find(b=>O.existsSync(b))??P.join(p,".workspai","activate");if(O.existsSync(u)||O.existsSync(g))return {venv:g,activateFile:u};let f=P.dirname(p);if(f===p)break;p=f;}return null}let a=n(e);!o$1&&!a&&(console.log(s.yellow(qp(e))),process.exit(1));let i;a&&O.existsSync(a.activateFile)?i=a.activateFile:a&&O.existsSync(a.venv)?i=o(a.venv):(console.log(s.yellow("No virtual environment found")),process.exit(1));let c=b$2();console.log(c?`call "${i}"`:`. "${i}"`);});he.command(v.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$3({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});he.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(s.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:r}=await import('./pipeline-VFI35PR4.js');await r({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});he.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(s.red(`Unknown autopilot action: ${t}`)),console.log(s.gray("Available: release")),process.exit(1));let r=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(r)||(console.log(s.red(`Invalid autopilot mode: ${e.mode}`)),console.log(s.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let o=Ps({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-D3UES53H.js'),a;try{a=await n({workspacePath:process.cwd(),mode:r,since:e.since,parallel:e.parallel===true,maxWorkers:o,json:e.json===true,output:e.output});}catch(i){let c=i instanceof Error?i.message:String(i);console.log(s.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(a,null,2)),a.summary.exitCode!==0&&process.exit(a.summary.exitCode);});he.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await xs(t,e);r!==0&&process.exit(r);});he.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (defaults to nearest or managed default)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await nu(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});r!==0&&process.exit(r);});he.command("goal [intent]").description("Compile a plain-language engineering intent into a governed, evidence-bound Goal Pack").option("--workspace <path>","Explicit canonical workspace path").option("--scope <scope>","Bound the Goal to workspace, project:<name>, or projects:<name>,<name>").addOption(new Option("--runtime <runtime>","Bind a coverage Goal to a canonical runtime in its scope").choices(["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"])).addOption(new Option("--for-agent <consumer>","Portable handoff consumer").choices(["generic","claude","codex"]).default("generic")).option("--max-attempts <count>","Maximum bounded proposal attempts","5").option("--refresh","Refresh the canonical Workspace Intelligence chain before planning").option("--dry-run","Validate and preview the Goal Pack without writing artifacts").option("--status [goal-id]","Inspect the active or named Goal Pack and validate its bindings").option("--list","List registered Goal Packs in the resolved workspace").option("--activate <goal-id>","Make a registered Goal Pack the active agent objective").option("--cancel <goal-id>","Cancel a registered Goal Pack without deleting evidence").option("--prepare <goal-id>","Create and link the deterministic CLI verification contract").option("--verify <goal-id>","Run CLI-owned verification for a prepared Goal Pack").option("--no-run","Read verification evidence without executing producer commands").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let{validateGoalCommandSelection:r}=await import('./goal-command-contract-43E22XQD.js'),o=r({intent:t,...e});if(o.operation!=="plan"){let u=b$4({startPath:process.cwd(),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!u)throw new Error("No canonical Workspai workspace could be resolved.");let{buildGoalLifecycleResult:f,inspectGoalLifecycle:b,prepareGoalVerification:k,transitionGoalLifecycle:S,verifyGoalLifecycle:A}=await import('./goal-lifecycle-HIQGDEEP.js'),E=e.prepare?await k({workspacePath:u.workspacePath,goalId:e.prepare}):null,d=e.verify?await A({workspacePath:u.workspacePath,goalId:e.verify,run:e.run!==false}):null,m=e.activate?await S({workspacePath:u.workspacePath,goalId:e.activate,action:"activate"}):e.cancel?await S({workspacePath:u.workspacePath,goalId:e.cancel,action:"cancel"}):null,w=await b({workspacePath:u.workspacePath,goalId:typeof e.status=="string"?e.status:m?.goal.id??E?.goal.id??d?.goal.id,validateBindings:!(e.list||e.cancel)}),y=f({operation:o.operation,activeGoalId:w.index.activeGoalId,goal:w.active,goals:w.index.goals,goalPack:w.goalPack,verifiedGoalId:d?.verifiedGoalId??E?.verifiedGoalId??null,verification:d?.verification??null});if(e.json)console.log(JSON.stringify(y,null,2));else if(e.list){console.log(s.bold(`Goals \xB7 ${w.index.goals.length}`));for(let h of w.index.goals)console.log(`${h.id===w.index.activeGoalId?s.green("\u25CF"):s.gray("\u25CB")} ${h.objective} \xB7 ${h.lifecycle} \xB7 ${h.state}`);}else w.active?(console.log(s.bold(w.active.objective)),console.log(s.gray(`   Goal: ${w.active.id}`)),console.log(s.gray(`   Lifecycle: ${w.active.lifecycle}`)),console.log(s.gray(`   Planning state: ${w.active.state}`))):console.log(s.yellow("No active Goal Pack is registered."));return}let n=Number(e.maxAttempts??5),{planGoalPack:a}=await import('./goal-pack-63PEP2ND.js'),c=e.json!==true&&process.stdin.isTTY===true&&process.stdout.isTTY===true?await import('./goal-interactive-selection-6YJOK4WC.js'):null,l=await a({startPath:process.cwd(),intent:o.intent,workspacePath:e.workspace,scope:e.scope,runtime:e.runtime,consumer:e.forAgent,maxAttempts:n,refresh:e.refresh===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),...c?{selectScope:c.selectGoalScopeInteractively,selectCoverageRuntime:c.selectGoalCoverageRuntimeInteractively}:{}});if(e.json){console.log(JSON.stringify(l,null,2));return}let p=l.goalPack,g=p.state==="ready-to-plan"?s.green("\u2714 Governed Goal Pack ready to plan"):p.state==="blocked"?s.red("\u25A0 Goal Pack blocked by missing bounded evidence"):p.state==="needs-evidence"?s.yellow("\u25C6 Goal Pack needs measurement evidence"):s.yellow("\u25C6 Goal Pack needs clarification");console.log(g),console.log(s.bold(`   ${p.intent.statement}`)),console.log(s.gray(`   Goal: ${p.id}`)),console.log(s.gray(`   Scope: ${p.scope.kind} \xB7 ${p.scope.projects.length} project(s) \xB7 ${p.baseline.runtimes.length} runtime(s)`)),console.log(s.gray(`   Evidence: ${p.baseline.graph.entities} entities \xB7 ${p.baseline.graph.relationships} relationships \xB7 ${p.baseline.graph.proofCoveragePercent}% relation proof coverage`)),console.log(s.gray("   Mutation: proposal only \xB7 explicit approval \xB7 CLI-owned verify/rollback")),p.decision&&console.log(s.yellow(`   Decision: ${p.decision.question}`)),l.dryRun?console.log(s.cyan("   Preview only; no artifacts were written.")):(console.log(s.gray(`   Goal Pack: ${p.artifacts.goalPack}`)),console.log(s.gray(`   Agent handoff: ${p.artifacts.agentHandoff}`))),console.log(s.gray(`   Next: ${p.commands.planVerifiedGoal??p.commands.inspectGraph}`));}catch(r){let o=r instanceof Error?r.message:String(r),n=e.verify?"verify":e.prepare?"prepare":e.activate?"activate":e.cancel?"cancel":e.list?"list":e.status!==void 0?"status":null;e.json?console.log(JSON.stringify(c$1({operation:n?`goal.${n}`:"goal.plan",code:n?`goal.${n}.failed`:"goal.plan.failed",message:o,context:{scope:e.scope??null,runtime:e.runtime??null,refresh:e.refresh===true,goalId:e.prepare??e.verify??e.activate??e.cancel??(typeof e.status=="string"?e.status:null)}}),null,2)):console.log(s.red(`\u274C Goal ${n?`${n} operation`:"planning"} failed: ${o}`)),process.exit(1);}});var Dn=he.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");Dn.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await on({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(s.green(`\u2714 Workspace snapshot created: ${r.manifest.name}`)),console.log(s.gray(`   Mode: ${r.manifest.mode}`)),console.log(s.gray(`   Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot create",code:"snapshot.create.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t??null}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot create failed: ${r.message}`)),process.exit(1);}});Dn.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await tp({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(s.yellow("No workspace snapshots found."));return}for(let r of e)console.log(s.cyan(r.name)),console.log(s.gray(`   ${r.createdAt} | ${r.mode} | ${r.projects.length} project(s)`)),console.log(s.gray(`   ${r.snapshotPath}`));}catch(e){t.json&&(console.log(JSON.stringify(c$1({operation:"snapshot list",code:"snapshot.list.failed",message:e.message,context:{workspacePath:t.workspace??null}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});Dn.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ep({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(s.cyan(`Snapshot: ${r.manifest.name}`)),console.log(s.gray(`   Mode: ${r.manifest.mode}`)),console.log(s.gray(`   Created: ${r.manifest.createdAt}`)),console.log(s.gray(`   Projects: ${r.manifest.projects.length}`)),console.log(s.gray(`   Files: ${r.estimatedFileCount}`)),console.log(s.gray(`   Bytes: ${r.estimatedBytes}`)),console.log(s.gray(`   Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot inspect",code:"snapshot.inspect.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot inspect failed: ${r.message}`)),process.exit(1);}});Dn.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await op({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(r,null,2));return}r.dryRun?console.log(s.cyan(`Snapshot restore dry-run: ${t}`)):console.log(s.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(s.gray(`   Snapshot: ${r.snapshotPath}`)),console.log(s.gray(`   Restored paths: ${r.restoredPaths.join(", ")}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot restore",code:"snapshot.restore.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot restore failed: ${r.message}`)),process.exit(1);}});function Yf(t){return (t instanceof Error?t.message:String(t)).replace(/file:\/\/\/[^\s"']+/g,"<local-path>").replace(/\\\\[^\\\s"']+[\\][^\s"']+/g,"<local-path>").replace(/[A-Za-z]:[\\/][^\s"']+/g,"<local-path>").replace(/\/(?:Users|home|private|var|opt|srv|mnt|Volumes|tmp)\/[^\s"']+/g,"<local-path>")}async function au(t){try{let{buildAgentBootstrapReceipt:e}=await import('./project-agent-entry-Z3OY3S7T.js'),r=await e({startPath:t.project,forAgent:t.forAgent,validateLiveInputs:t.liveInputs!==false});if(t.json)console.log(JSON.stringify(r,null,2));else {let o=r.status==="ready"?s.green:r.status==="degraded"?s.yellow:s.red;console.log(o(`Agent entry: ${r.status}`)),console.log(s.gray(`   Project: ${r.project.name}`)),console.log(s.gray(`   Workspace: ${r.workspace.name}`)),console.log(s.gray(`   Consumer: ${r.resolvedHost}`)),console.log(s.gray(`   Receipt: ${r.receiptId.slice(0,16)}`));for(let n of r.checks.filter(a=>a.status!=="passed"))console.log((n.status==="failed"?s.red:s.yellow)(`   ${n.id}: ${n.message}`));console.log(s.gray(`   Next: ${r.nextActions[0]}`));}(r.status==="blocked"||t.strict&&r.status!=="ready")&&process.exit(2);}catch(e){let r=Yf(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"agent.entry.bootstrap.failed",message:r}),null,2)):console.log(s.red(`Agent entry failed: ${r}`)),process.exit(1);}}var su=he.command("agent").description("Bootstrap coding agents from canonical Workspai project evidence");su.command("bootstrap").description("Issue a portable canonical-first grounding receipt for the current project").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier","generic").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless the complete entry receipt is ready").option("--json","Emit the versioned machine-readable receipt").action(async t=>au({...t,operation:"agent bootstrap"}));Jp(su);var Lt=he.command("project").description("Safe workspace project lifecycle operations");Lt.command("agent-entry [action]").description("Verify canonical-first project entry coverage for supported agent hosts").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier or all","all").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless all selected entry checks are ready").option("--json","Emit the versioned machine-readable receipt").action(async(t,e)=>{let r=t??"verify";if(r!=="verify"){let o=`Unknown project agent-entry action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project agent-entry",code:"project.agent-entry.action.invalid",message:o}),null,2)):(console.log(s.red(o)),console.log(s.gray("   workspai project agent-entry verify [--for-agent <agent|all>] [--strict] [--json]"))),process.exit(1);}await au({...e,operation:"project agent-entry verify"});});Lt.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{Yd({json:t.json});});Lt.command("workspace [action]").description("Show or repair the canonical workspace binding for the current Workspai project").option("--workspace <path>","Explicit workspace for relink or validation").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=t??"status";if(!["status","relink"].includes(r)){let o=`Unknown project workspace action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:"project.workspace.action.invalid",message:o}),null,2)):(console.log(s.red(`\u274C ${o}`)),console.log(s.gray("   npx workspai project workspace [status|relink] [--workspace <path>] [--json]"))),process.exit(1);}try{let o=b$4({startPath:P.resolve(e.project??process.cwd()),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!o||!o.projectPath)throw new a$2("project.workspace.unlinked","No Workspai project metadata was found from the requested path.");let n=r==="relink"||o.source==="registry"||o.recovered?await d$2(o):null,a={schemaVersion:"project-workspace-resolution.v1",status:"resolved",workspacePath:o.workspacePath,projectPath:o.projectPath,source:n?"local-link":o.source,recovered:o.recovered||n!==null,linkPath:n?.linkPath??o.linkPath??P.join(o.projectPath,f$1),nextCommand:"npx workspai workspace intelligence run --for-agent generic --strict --json",pathPolicy:{classification:"machine-local",portable:false,persistence:"forbidden",disclosure:"forbidden",purpose:"runtime-workspace-resolution"}};if(cd(a),e.json){console.log(JSON.stringify(a,null,2));return}console.log(s.green("\u2714 Project workspace resolved")),console.log(s.gray(`   Workspace: ${a.workspacePath}`)),console.log(s.gray(`   Project: ${a.projectPath}`)),console.log(s.gray(`   Resolution: ${a.source}`)),n&&console.log(s.gray(`   Local link repaired: ${n.linkPath}`));}catch(o){let n=o instanceof a$2?o:null,a=o instanceof Error?o.message:String(o);e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:n?.code??"project.workspace.resolve.failed",message:a,context:n?.context}),null,2)):console.log(s.red(`\u274C ${a}`)),process.exit(1);}});Lt.command("coverage").description("Inspect or run runtime-native test coverage and publish normalized project evidence").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--target <percent>","Required coverage target from 0 to 100","80").option("--run","Run the detected runtime-native coverage command before reading evidence").option("--strict","Return exit 2 when coverage is unavailable or below the selected target").option("--json","Emit machine-readable JSON output").action(async t=>{let e=Number(t.target??80);if(!Number.isFinite(e)||e<0||e>100){let r="--target must be a number from 0 to 100.";t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.target.invalid",message:r}),null,2)):console.log(s.red(`\u274C ${r}`)),process.exit(1);}try{let{collectProjectTestCoverage:r}=await import('./project-test-coverage-3P5FH6E5.js'),o=await r({projectPath:t.project,target:e,run:t.run===true});if(t.json)console.log(JSON.stringify(o,null,2));else {let a=o.metrics[o.target.metric]?.percent,i=a==null?"unavailable":`${a}%`,c=o.status==="passed"?s.green:o.status==="failed"?s.red:s.yellow;if(console.log(c(`Project coverage: ${o.status}`)),console.log(s.gray(`   Project: ${o.project.name}`)),console.log(s.gray(`   Runtime: ${o.runtime}`)),console.log(s.gray(`   ${o.target.metric}: ${i} \xB7 target ${o.target.percent}%`)),console.log(s.gray(`   Evidence: ${o.artifactPaths.project}`)),o.lowCoverageFiles.length>0){console.log(s.gray("   Lowest coverage files:"));for(let l of o.lowCoverageFiles.slice(0,10))console.log(s.gray(`   \u2022 ${l.path}: ${l.percent===null?"unknown":`${l.percent}%`} (${l.uncovered} uncovered)`));}for(let l of o.diagnostics)console.log(s.gray(`   ${l}`));}o.status==="failed"&&process.exit(1),t.strict&&(o.status==="below-target"||o.status==="unavailable")&&process.exit(2);}catch(r){let o=r.message;t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.failed",message:o}),null,2)):console.log(s.red(`\u274C Project coverage failed: ${o}`)),process.exit(1);}});Lt.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await _a({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(s.yellow("No archived projects found."));return}for(let r of e)console.log(s.cyan(r.projectName)),console.log(s.gray(`   Archived: ${r.archivedAt}`)),console.log(s.gray(`   Path: ${r.archivePath}`)),r.reason&&console.log(s.gray(`   Reason: ${r.reason}`));}catch(e){console.log(s.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});Lt.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await Ia({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?s.cyan(`Project archive dry-run: ${r.projectName}`):s.green(`\u2714 Project archived: ${r.projectName}`)),console.log(s.gray(`   From: ${r.projectPath}`)),r.archivePath&&console.log(s.gray(`   To: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project archive",code:"project.archive.failed",message:o}),null,2)):console.log(s.red(`\u274C Project archive failed: ${o}`)),process.exit(1);}});Lt.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await lp({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?s.cyan(`Project restore dry-run: ${r.projectName}`):s.green(`\u2714 Project restored: ${r.projectName}`)),console.log(s.gray(`   From: ${r.archivePath}`)),console.log(s.gray(`   To: ${r.projectPath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project restore",code:"project.restore.failed",message:o}),null,2)):console.log(s.red(`\u274C Project restore failed: ${o}`)),process.exit(1);}});Lt.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await cp({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}let o=r.action==="archive"?"archived":"deleted";console.log(r.dryRun?s.cyan(`Project ${o} dry-run: ${r.projectName}`):s.green(`\u2714 Project ${o}: ${r.projectName}`)),console.log(s.gray(`   Path: ${r.projectPath}`)),r.archivePath&&console.log(s.gray(`   Archive: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project delete",code:"project.delete.failed",message:o}),null,2)):console.log(s.red(`\u274C Project delete failed: ${o}`)),process.exit(1);}});he.command(v.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json [mode]","Output JSON: full (default) or summary").option("--fresh","Bypass Doctor project scan cache and refresh live evidence").option("--verbose","Show every probe, lifecycle capability, and detailed project signal").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate an action or lifecycle plan without applying or executing changes").option("--apply","Apply remediation plan non-interactively").option("--runtime <runtime>","Filter Doctor capability truth by runtime family").option("--framework <framework>","Filter Doctor capability truth by framework").option("--validate","Run the versioned Doctor disease validation corpus").option("--write","Write Doctor capability/validation artifacts inside the workspace").action(async(t,e)=>{if(t&&t!=="workspace"&&t!=="project"&&t!=="capabilities"&&(console.log(s.red(`Unknown doctor scope: ${t}`)),console.log(s.gray("Available: workspace, project, capabilities")),console.log(s.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project | npx workspai doctor capabilities")),process.exit(1)),typeof e.json=="string"&&!["full","summary"].includes(e.json)&&(console.log(s.red(`Invalid Doctor JSON mode: ${e.json}. Use full or summary.`)),process.exit(1)),t==="capabilities"){(e.fix||e.plan||e.apply||e.project)&&(console.log(s.red("Doctor capability inspection cannot be combined with repair or project-scope flags.")),process.exit(1));let{runDoctorCapabilities:i}=await import('./capabilities-command-VK3LQLP2.js'),c=await i({runtime:e.runtime,framework:e.framework,validate:e.validate===true,write:e.write===true,workspace:typeof e.workspace=="string"?e.workspace:void 0,json:!!e.json});c!==0&&process.exit(c);return}(e.runtime||e.framework||e.validate||e.write)&&(console.log(s.red('Doctor capability flags require the "doctor capabilities" scope.')),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(s.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let r=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!r.has(e.profile)&&(console.log(s.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let o=await Af({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(s.yellow("\u26A0\uFE0F  Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(s.gray(`   Candidate: ${o.candidatePath}`)),console.log(s.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(s.gray("   If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-KGADT4PI.js'),a=await n({...e,json:e.json==="summary"?"summary":!!e.json,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});a!==0&&process.exit(a);});he.command(v.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
+\u274C An unexpected error occurred:`),console.error(r)),process.exit(1);}finally{Dt=null;}});ql(he);Wp(he);ep(he);$p(he);he.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{Gf({json:t.json});});he.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:r}=await import('./analyze-Z3EZNJRI.js'),o=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(o,null,2)):r(o),o.summary.verdict==="blocked"&&process.exit(2);}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:"analyze",code:"analyze.failed",message:r}),null,2)):console.error(s.red(`Analyze failed: ${r}`)),process.exit(1);}});Il(he);he.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(s.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function r(l){let p=l;for(;;){let f=u(p,"context.json").find(g=>$.existsSync(g));if(f)return f;let u$1=b.dirname(p);if(u$1===p)break;p=u$1;}return null}let o$1=r(e);function n(l){let p=l;for(;;){let f=b.join(p,".venv"),u=[b.join(p,".workspai","activate"),b.join(p,".rapidkit","activate")].find(j=>$.existsSync(j))??b.join(p,".workspai","activate");if($.existsSync(u)||$.existsSync(f))return {venv:f,activateFile:u};let g=b.dirname(p);if(g===p)break;p=g;}return null}let a=n(e);!o$1&&!a&&(console.log(s.yellow(rd(e))),process.exit(1));let i;a&&$.existsSync(a.activateFile)?i=a.activateFile:a&&$.existsSync(a.venv)?i=o(a.venv):(console.log(s.yellow("No virtual environment found")),process.exit(1));let c=b$3();console.log(c?`call "${i}"`:`. "${i}"`);});he.command(v.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$4({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});he.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(s.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:r}=await import('./pipeline-OUYS4ZYV.js');await r({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});he.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(s.red(`Unknown autopilot action: ${t}`)),console.log(s.gray("Available: release")),process.exit(1));let r=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(r)||(console.log(s.red(`Invalid autopilot mode: ${e.mode}`)),console.log(s.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let o=Is({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-T6XFRWZT.js'),a;try{a=await n({workspacePath:process.cwd(),mode:r,since:e.since,parallel:e.parallel===true,maxWorkers:o,json:e.json===true,output:e.output});}catch(i){let c=i instanceof Error?i.message:String(i);console.log(s.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(a,null,2)),a.summary.exitCode!==0&&process.exit(a.summary.exitCode);});he.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Ls(t,e);r!==0&&process.exit(r);});he.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (valid workspace, or an existing empty directory to bootstrap)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await hu(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});r!==0&&process.exit(r);});he.command("goal [intent]").description("Compile a plain-language engineering intent into a governed, evidence-bound Goal Pack").option("--workspace <path>","Explicit canonical workspace path").option("--scope <scope>","Bound the Goal to workspace, project:<name>, or projects:<name>,<name>").addOption(new Option("--runtime <runtime>","Bind a coverage Goal to a canonical runtime in its scope").choices(["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"])).addOption(new Option("--for-agent <consumer>","Portable handoff consumer").choices(["generic","claude","codex"]).default("generic")).option("--max-attempts <count>","Maximum bounded proposal attempts","5").option("--refresh","Refresh the canonical Workspace Intelligence chain before planning").option("--dry-run","Validate and preview the Goal Pack without writing artifacts").option("--status [goal-id]","Inspect the active or named Goal Pack and validate its bindings").option("--list","List registered Goal Packs in the resolved workspace").option("--activate <goal-id>","Make a registered Goal Pack the active agent objective").option("--cancel <goal-id>","Cancel a registered Goal Pack without deleting evidence").option("--prepare <goal-id>","Create and link the deterministic CLI verification contract").option("--verify <goal-id>","Run CLI-owned verification for a prepared Goal Pack").option("--no-run","Read verification evidence without executing producer commands").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let{validateGoalCommandSelection:r}=await import('./goal-command-contract-43E22XQD.js'),o=r({intent:t,...e});if(o.operation!=="plan"){let u=b$5({startPath:process.cwd(),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!u)throw new Error("No canonical Workspai workspace could be resolved.");let{buildGoalLifecycleResult:g,inspectGoalLifecycle:j,prepareGoalVerification:y,transitionGoalLifecycle:S,verifyGoalLifecycle:E}=await import('./goal-lifecycle-BDWTWS55.js'),R=e.prepare?await y({workspacePath:u.workspacePath,goalId:e.prepare}):null,d=e.verify?await E({workspacePath:u.workspacePath,goalId:e.verify,run:e.run!==false}):null,m=e.activate?await S({workspacePath:u.workspacePath,goalId:e.activate,action:"activate"}):e.cancel?await S({workspacePath:u.workspacePath,goalId:e.cancel,action:"cancel"}):null,w=await j({workspacePath:u.workspacePath,goalId:typeof e.status=="string"?e.status:m?.goal.id??R?.goal.id??d?.goal.id,validateBindings:!(e.list||e.cancel)}),k=g({operation:o.operation,activeGoalId:w.index.activeGoalId,goal:w.active,goals:w.index.goals,goalPack:w.goalPack,verifiedGoalId:d?.verifiedGoalId??R?.verifiedGoalId??null,verification:d?.verification??null});if(e.json)console.log(JSON.stringify(k,null,2));else if(e.list){console.log(s.bold(`Goals \xB7 ${w.index.goals.length}`));for(let h of w.index.goals)console.log(`${h.id===w.index.activeGoalId?s.green("\u25CF"):s.gray("\u25CB")} ${h.objective} \xB7 ${h.lifecycle} \xB7 ${h.state}`);}else w.active?(console.log(s.bold(w.active.objective)),console.log(s.gray(`   Goal: ${w.active.id}`)),console.log(s.gray(`   Lifecycle: ${w.active.lifecycle}`)),console.log(s.gray(`   Planning state: ${w.active.state}`))):console.log(s.yellow("No active Goal Pack is registered."));return}let n=Number(e.maxAttempts??5),{planGoalPack:a}=await import('./goal-pack-5JDNZFKV.js'),c=e.json!==true&&process.stdin.isTTY===true&&process.stdout.isTTY===true?await import('./goal-interactive-selection-6YJOK4WC.js'):null,l=await a({startPath:process.cwd(),intent:o.intent,workspacePath:e.workspace,scope:e.scope,runtime:e.runtime,consumer:e.forAgent,maxAttempts:n,refresh:e.refresh===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),...c?{selectScope:c.selectGoalScopeInteractively,selectCoverageRuntime:c.selectGoalCoverageRuntimeInteractively}:{}});if(e.json){console.log(JSON.stringify(l,null,2));return}let p=l.goalPack,f=p.state==="ready-to-plan"?s.green("\u2714 Governed Goal Pack ready to plan"):p.state==="blocked"?s.red("\u25A0 Goal Pack blocked by missing bounded evidence"):p.state==="needs-evidence"?s.yellow("\u25C6 Goal Pack needs measurement evidence"):s.yellow("\u25C6 Goal Pack needs clarification");console.log(f),console.log(s.bold(`   ${p.intent.statement}`)),console.log(s.gray(`   Goal: ${p.id}`)),console.log(s.gray(`   Scope: ${p.scope.kind} \xB7 ${p.scope.projects.length} project(s) \xB7 ${p.baseline.runtimes.length} runtime(s)`)),console.log(s.gray(`   Evidence: ${p.baseline.graph.entities} entities \xB7 ${p.baseline.graph.relationships} relationships \xB7 ${p.baseline.graph.proofCoveragePercent}% relation proof coverage`)),console.log(s.gray("   Mutation: proposal only \xB7 explicit approval \xB7 CLI-owned verify/rollback")),p.decision&&console.log(s.yellow(`   Decision: ${p.decision.question}`)),l.dryRun?console.log(s.cyan("   Preview only; no artifacts were written.")):(console.log(s.gray(`   Goal Pack: ${p.artifacts.goalPack}`)),console.log(s.gray(`   Agent handoff: ${p.artifacts.agentHandoff}`))),console.log(s.gray(`   Next: ${p.commands.planVerifiedGoal??p.commands.inspectGraph}`));}catch(r){let o=r instanceof Error?r.message:String(r),n=e.verify?"verify":e.prepare?"prepare":e.activate?"activate":e.cancel?"cancel":e.list?"list":e.status!==void 0?"status":null;e.json?console.log(JSON.stringify(c$1({operation:n?`goal.${n}`:"goal.plan",code:n?`goal.${n}.failed`:"goal.plan.failed",message:o,context:{scope:e.scope??null,runtime:e.runtime??null,refresh:e.refresh===true,goalId:e.prepare??e.verify??e.activate??e.cancel??(typeof e.status=="string"?e.status:null)}}),null,2)):console.log(s.red(`\u274C Goal ${n?`${n} operation`:"planning"} failed: ${o}`)),process.exit(1);}});var Kn=he.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");Kn.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await cn({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(s.green(`\u2714 Workspace snapshot created: ${r.manifest.name}`)),console.log(s.gray(`   Mode: ${r.manifest.mode}`)),console.log(s.gray(`   Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot create",code:"snapshot.create.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t??null}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot create failed: ${r.message}`)),process.exit(1);}});Kn.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await lp({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(s.yellow("No workspace snapshots found."));return}for(let r of e)console.log(s.cyan(r.name)),console.log(s.gray(`   ${r.createdAt} | ${r.mode} | ${r.projects.length} project(s)`)),console.log(s.gray(`   ${r.snapshotPath}`));}catch(e){t.json&&(console.log(JSON.stringify(c$1({operation:"snapshot list",code:"snapshot.list.failed",message:e.message,context:{workspacePath:t.workspace??null}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});Kn.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await cp({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(s.cyan(`Snapshot: ${r.manifest.name}`)),console.log(s.gray(`   Mode: ${r.manifest.mode}`)),console.log(s.gray(`   Created: ${r.manifest.createdAt}`)),console.log(s.gray(`   Projects: ${r.manifest.projects.length}`)),console.log(s.gray(`   Files: ${r.estimatedFileCount}`)),console.log(s.gray(`   Bytes: ${r.estimatedBytes}`)),console.log(s.gray(`   Path: ${r.snapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot inspect",code:"snapshot.inspect.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot inspect failed: ${r.message}`)),process.exit(1);}});Kn.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await dp({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(r,null,2));return}r.dryRun?console.log(s.cyan(`Snapshot restore dry-run: ${t}`)):console.log(s.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(s.gray(`   Snapshot: ${r.snapshotPath}`)),console.log(s.gray(`   Restored paths: ${r.restoredPaths.join(", ")}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){e.json&&(console.log(JSON.stringify(c$1({operation:"snapshot restore",code:"snapshot.restore.failed",message:r.message,context:{workspacePath:e.workspace??null,name:t}}),null,2)),process.exit(1)),console.log(s.red(`\u274C Snapshot restore failed: ${r.message}`)),process.exit(1);}});function dh(t){return (t instanceof Error?t.message:String(t)).replace(/file:\/\/\/[^\s"']+/g,"<local-path>").replace(/\\\\[^\\\s"']+[\\][^\s"']+/g,"<local-path>").replace(/[A-Za-z]:[\\/][^\s"']+/g,"<local-path>").replace(/\/(?:Users|home|private|var|opt|srv|mnt|Volumes|tmp)\/[^\s"']+/g,"<local-path>")}async function wu(t){try{let{buildAgentBootstrapReceipt:e}=await import('./project-agent-entry-75WO3QWP.js'),r=await e({startPath:t.project,forAgent:t.forAgent,validateLiveInputs:t.liveInputs!==false});if(t.json)console.log(JSON.stringify(r,null,2));else {let o=r.status==="ready"?s.green:r.status==="degraded"?s.yellow:s.red;console.log(o(`Agent entry: ${r.status}`)),console.log(s.gray(`   Project: ${r.project.name}`)),console.log(s.gray(`   Workspace: ${r.workspace.name}`)),console.log(s.gray(`   Consumer: ${r.resolvedHost}`)),console.log(s.gray(`   Receipt: ${r.receiptId.slice(0,16)}`));for(let n of r.checks.filter(a=>a.status!=="passed"))console.log((n.status==="failed"?s.red:s.yellow)(`   ${n.id}: ${n.message}`));console.log(s.gray(`   Next: ${r.nextActions[0]}`));}(r.status==="blocked"||t.strict&&r.status!=="ready")&&process.exit(2);}catch(e){let r=dh(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"agent.entry.bootstrap.failed",message:r}),null,2)):console.log(s.red(`Agent entry failed: ${r}`)),process.exit(1);}}var yu=he.command("agent").description("Bootstrap coding agents from canonical Workspai project evidence");yu.command("bootstrap").description("Issue a portable canonical-first grounding receipt for the current project").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier","generic").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless the complete entry receipt is ready").option("--json","Emit the versioned machine-readable receipt").action(async t=>wu({...t,operation:"agent bootstrap"}));Xp(yu);var Lt=he.command("project").description("Safe workspace project lifecycle operations");Lt.command("agent-entry [action]").description("Verify canonical-first project entry coverage for supported agent hosts").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--for-agent <agent>","Agent host identifier or all","all").option("--no-live-inputs","Skip live project input validation and return degraded evidence").option("--strict","Return exit 2 unless all selected entry checks are ready").option("--json","Emit the versioned machine-readable receipt").action(async(t,e)=>{let r=t??"verify";if(r!=="verify"){let o=`Unknown project agent-entry action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project agent-entry",code:"project.agent-entry.action.invalid",message:o}),null,2)):(console.log(s.red(o)),console.log(s.gray("   workspai project agent-entry verify [--for-agent <agent|all>] [--strict] [--json]"))),process.exit(1);}await wu({...e,operation:"project agent-entry verify"});});Lt.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{lu({json:t.json});});Lt.command("workspace [action]").description("Show or repair the canonical workspace binding for the current Workspai project").option("--workspace <path>","Explicit workspace for relink or validation").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=t??"status";if(!["status","relink"].includes(r)){let o=`Unknown project workspace action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:"project.workspace.action.invalid",message:o}),null,2)):(console.log(s.red(`\u274C ${o}`)),console.log(s.gray("   npx workspai project workspace [status|relink] [--workspace <path>] [--json]"))),process.exit(1);}try{let o=b$5({startPath:b.resolve(e.project??process.cwd()),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!o||!o.projectPath)throw new a$2("project.workspace.unlinked","No Workspai project metadata was found from the requested path.");let n=r==="relink"||o.source==="registry"||o.recovered?await d$2(o):null,a={schemaVersion:"project-workspace-resolution.v1",status:"resolved",workspacePath:o.workspacePath,projectPath:o.projectPath,source:n?"local-link":o.source,recovered:o.recovered||n!==null,linkPath:n?.linkPath??o.linkPath??b.join(o.projectPath,f$1),nextCommand:"npx workspai workspace intelligence run --for-agent generic --strict --json",pathPolicy:{classification:"machine-local",portable:false,persistence:"forbidden",disclosure:"forbidden",purpose:"runtime-workspace-resolution"}};if(hd(a),e.json){console.log(JSON.stringify(a,null,2));return}console.log(s.green("\u2714 Project workspace resolved")),console.log(s.gray(`   Workspace: ${a.workspacePath}`)),console.log(s.gray(`   Project: ${a.projectPath}`)),console.log(s.gray(`   Resolution: ${a.source}`)),n&&console.log(s.gray(`   Local link repaired: ${n.linkPath}`));}catch(o){let n=o instanceof a$2?o:null,a=o instanceof Error?o.message:String(o);e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:n?.code??"project.workspace.resolve.failed",message:a,context:n?.context}),null,2)):console.log(s.red(`\u274C ${a}`)),process.exit(1);}});Lt.command("coverage").description("Inspect or run runtime-native test coverage and publish normalized project evidence").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--target <percent>","Required coverage target from 0 to 100","80").option("--run","Run the detected runtime-native coverage command before reading evidence").option("--strict","Return exit 2 when coverage is unavailable or below the selected target").option("--json","Emit machine-readable JSON output").action(async t=>{let e=Number(t.target??80);if(!Number.isFinite(e)||e<0||e>100){let r="--target must be a number from 0 to 100.";t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.target.invalid",message:r}),null,2)):console.log(s.red(`\u274C ${r}`)),process.exit(1);}try{let{collectProjectTestCoverage:r}=await import('./project-test-coverage-3P5FH6E5.js'),o=await r({projectPath:t.project,target:e,run:t.run===true});if(t.json)console.log(JSON.stringify(o,null,2));else {let a=o.metrics[o.target.metric]?.percent,i=a==null?"unavailable":`${a}%`,c=o.status==="passed"?s.green:o.status==="failed"?s.red:s.yellow;if(console.log(c(`Project coverage: ${o.status}`)),console.log(s.gray(`   Project: ${o.project.name}`)),console.log(s.gray(`   Runtime: ${o.runtime}`)),console.log(s.gray(`   ${o.target.metric}: ${i} \xB7 target ${o.target.percent}%`)),console.log(s.gray(`   Evidence: ${o.artifactPaths.project}`)),o.lowCoverageFiles.length>0){console.log(s.gray("   Lowest coverage files:"));for(let l of o.lowCoverageFiles.slice(0,10))console.log(s.gray(`   \u2022 ${l.path}: ${l.percent===null?"unknown":`${l.percent}%`} (${l.uncovered} uncovered)`));}for(let l of o.diagnostics)console.log(s.gray(`   ${l}`));}o.status==="failed"&&process.exit(1),t.strict&&(o.status==="below-target"||o.status==="unavailable")&&process.exit(2);}catch(r){let o=r.message;t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.failed",message:o}),null,2)):console.log(s.red(`\u274C Project coverage failed: ${o}`)),process.exit(1);}});Lt.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await Wa({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(s.yellow("No archived projects found."));return}for(let r of e)console.log(s.cyan(r.projectName)),console.log(s.gray(`   Archived: ${r.archivedAt}`)),console.log(s.gray(`   Path: ${r.archivePath}`)),r.reason&&console.log(s.gray(`   Reason: ${r.reason}`));}catch(e){console.log(s.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});Lt.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await Da({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?s.cyan(`Project archive dry-run: ${r.projectName}`):s.green(`\u2714 Project archived: ${r.projectName}`)),console.log(s.gray(`   From: ${r.projectPath}`)),r.archivePath&&console.log(s.gray(`   To: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project archive",code:"project.archive.failed",message:o}),null,2)):console.log(s.red(`\u274C Project archive failed: ${o}`)),process.exit(1);}});Lt.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await wp({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?s.cyan(`Project restore dry-run: ${r.projectName}`):s.green(`\u2714 Project restored: ${r.projectName}`)),console.log(s.gray(`   From: ${r.archivePath}`)),console.log(s.gray(`   To: ${r.projectPath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project restore",code:"project.restore.failed",message:o}),null,2)):console.log(s.red(`\u274C Project restore failed: ${o}`)),process.exit(1);}});Lt.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await hp({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}let o=r.action==="archive"?"archived":"deleted";console.log(r.dryRun?s.cyan(`Project ${o} dry-run: ${r.projectName}`):s.green(`\u2714 Project ${o}: ${r.projectName}`)),console.log(s.gray(`   Path: ${r.projectPath}`)),r.archivePath&&console.log(s.gray(`   Archive: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project delete",code:"project.delete.failed",message:o}),null,2)):console.log(s.red(`\u274C Project delete failed: ${o}`)),process.exit(1);}});he.command(v.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json [mode]","Output JSON: full (default) or summary").option("--fresh","Bypass Doctor project scan cache and refresh live evidence").option("--verbose","Show every probe, lifecycle capability, and detailed project signal").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate an action or lifecycle plan without applying or executing changes").option("--apply","Apply remediation plan non-interactively").option("--runtime <runtime>","Filter Doctor capability truth by runtime family").option("--framework <framework>","Filter Doctor capability truth by framework").option("--validate","Run the versioned Doctor disease validation corpus").option("--write","Write Doctor capability/validation artifacts inside the workspace").action(async(t,e)=>{if(t&&t!=="workspace"&&t!=="project"&&t!=="capabilities"&&(console.log(s.red(`Unknown doctor scope: ${t}`)),console.log(s.gray("Available: workspace, project, capabilities")),console.log(s.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project | npx workspai doctor capabilities")),process.exit(1)),typeof e.json=="string"&&!["full","summary"].includes(e.json)&&(console.log(s.red(`Invalid Doctor JSON mode: ${e.json}. Use full or summary.`)),process.exit(1)),t==="capabilities"){(e.fix||e.plan||e.apply||e.project)&&(console.log(s.red("Doctor capability inspection cannot be combined with repair or project-scope flags.")),process.exit(1));let{runDoctorCapabilities:i}=await import('./capabilities-command-VK3LQLP2.js'),c=await i({runtime:e.runtime,framework:e.framework,validate:e.validate===true,write:e.write===true,workspace:typeof e.workspace=="string"?e.workspace:void 0,json:!!e.json});c!==0&&process.exit(c);return}(e.runtime||e.framework||e.validate||e.write)&&(console.log(s.red('Doctor capability flags require the "doctor capabilities" scope.')),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(s.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let r=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!r.has(e.profile)&&(console.log(s.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let o=await Vf({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(s.yellow("\u26A0\uFE0F  Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(s.gray(`   Candidate: ${o.candidatePath}`)),console.log(s.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(s.gray("   If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-PFN6KB6P.js'),a=await n({...e,json:e.json==="summary"?"summary":!!e.json,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});a!==0&&process.exit(a);});he.command(v.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
   workspace run <stage>   \u2014 fleet stage execution across discovered projects
                             stages: init | test | build | start | <custom-from-context>
   workspace explain|why   \u2014 blocker/project narrative (--write for artifact)
@@ -408,39 +408,46 @@ Workspace Actions:
   Fleet lifecycle         run | init
 
 Use "workspai commands --json" for the contract-backed runtime inventory.
-See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,r,o){let n=this.opts(),a=d=>{let m=n.workspace?P.resolve(n.workspace):null,w=null,y=null;try{w=b$4({startPath:process.cwd(),explicitWorkspacePath:m,strict:true})?.workspacePath??null;}catch(x){if(x instanceof a$2)y=x;else throw x}if(!w||!ot(w)){let x=y?.message??"Not inside a Workspai workspace. Run from a workspace/project directory or pass --workspace <path>.";(n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${d}`,code:y?.code??"workspace.root.required",message:x,context:{cwd:P.resolve(process.cwd()),...m?{requestedWorkspace:m}:{},...y?.context??{}}}),null,2)),process.exit(1)),console.log(s.red(`\u274C ${x}`)),console.log(s.gray("\u{1F4A1} Run from a workspace/project directory, or pass --workspace <path> to resolve ambiguity.")),process.exit(1);}let h=P.resolve(process.cwd()),v=P.resolve(w);return h!==v&&!n.json&&console.log(s.gray(`\u2139 Using workspace root ${w} for "${d}" (current directory: ${h}).`)),w},i=d=>process.argv.includes(d),c=d=>_e(process.argv,d),l=()=>n.output||c("--output"),p$1=()=>{if(!n.scanDepth)return;let d=Number.parseInt(n.scanDepth,10);return Number.isFinite(d)?d:void 0},g=(d,m,w)=>{if(d===void 0)return;let y=Number.parseInt(d,10);if(!Number.isFinite(y)||y<1||y>w)throw new Error(`${m} must be an integer between 1 and ${w}.`);return y},u=()=>({...n.graphInventoryLimit!==void 0?{inventoryFileLimitPerProject:g(n.graphInventoryLimit,"--graph-inventory-limit",2e6)}:{},...n.graphSemanticBudget!==void 0?{semanticFilesPerProject:g(n.graphSemanticBudget,"--graph-semantic-budget",25e4)}:{},...n.graphDeepBudget!==void 0?{maxFilesPerProject:g(n.graphDeepBudget,"--graph-deep-budget",1e5)}:{},...n.graphSourceBudget!==void 0?{sourceFilesPerProject:g(n.graphSourceBudget,"--graph-source-budget",5e4)}:{}}),f=(d,m)=>{if(!d)return;let w=d.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!w)throw new Error(`${m} must be a byte size such as 500gb or 2tb.`);let y={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},h=Number(w[1])*y[w[2]||"b"];if(!Number.isSafeInteger(Math.floor(h))||h<=0)throw new Error(`${m} is outside the supported numeric range.`);return Math.floor(h)},b=()=>{let d=n.downloadTimeoutMs,m=d===void 0?void 0:Number.parseInt(d,10);if(m!==void 0&&(!Number.isFinite(m)||m<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:f(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:f(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:m,allowPrivateNetwork:n.allowPrivateNetwork===true||i("--allow-private-network")}},k=new Set(Object.values(ao).flatMap(d=>[...d.flags])),S=new Set(process.argv.slice(2).filter(d=>d.startsWith("--")).map(d=>d.split("=",1)[0]).filter(d=>k.has(d))),A=ao[t]?.flags,E=A?[...S].filter(d=>!A.includes(d)):[];if(E.length>0){let d=`${E.join(", ")} ${E.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||S.has("--json")?console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:d,exitCode:2,context:{action:t,unsupportedFlags:E,allowedFlags:A}}),null,2)):(console.log(s.red(`\u274C ${d}`)),console.log(s.gray(`   Allowed flags: ${A.join(", ")||"none"}`))),process.exit(2);}if((Yp(t)||t==="trace"||t==="feedback"||t==="mcp")&&c$2({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||i("--json"),strict:n.strict===true||i("--strict")}}),t==="list"){let{listWorkspaces:d}=await import('./workspace-PAXTJCMH.js');await d({json:n.json===true||i("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(s.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(s.gray("   npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let d=a("intelligence"),{runWorkspaceIntelligenceChain:m}=await import('./workspace-intelligence-runner-BU6JKNUD.js'),w=await m({workspacePath:d,strict:n.strict===true||i("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||i("--json"))console.log(JSON.stringify(w,null,2));else {console.log(s.green(`\u2714 Workspace Intelligence: ${w.status}`));for(let y of w.stages)console.log(s.gray(`   ${y.id}: ${y.status} \u2014 ${y.message}`));console.log(s.gray(`   Evidence: ${w.artifactPath}`));}w.exitCode!==0&&process.exit(w.exitCode);}else if(t==="model"){let d=a("model"),{buildWorkspaceModelCached:m,buildWorkspaceModelIncremental:w,createWorkspaceModelBuildProvenance:y,writeWorkspaceModel:h}=await import('./workspace-model-DUGPW5IB.js'),v=n.incremental===true||i("--incremental"),x=n.cache===true||i("--cache")||v,R={workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1(),strict:n.strict===true||i("--strict")},C,$;if(v){let N=await w(R);C=N.model,$=N.mode;}else {let N=await m({...R,cache:x});C=N.model,$=N.cache;}C={...C,build:y({mode:v?"incremental":x?"cache":"full",engineStatus:$})};let j;(n.write===true||i("--write"))&&(j=await h(C,d));let _=(n.strict===true||i("--strict"))&&C.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...C,...j?{outputPath:j}:{}},null,2)),_&&process.exit(1);return}console.log(s.green(`\u2714 Workspace model: ${C.workspace.name}`)),v?console.log(s.gray(`   Build: ${$} (incremental)`)):x&&console.log(s.gray(`   Cache: ${$}`)),console.log(s.gray(`   Projects: ${C.summary.projectCount}`)),console.log(s.gray(`   Runtimes: ${C.summary.runtimes.join(", ")||"none"}`)),console.log(s.gray(`   Frameworks: ${C.summary.frameworks.join(", ")||"none"}`)),console.log(s.gray(`   Workspace type: ${C.identity.workspaceType}`)),console.log(s.gray(`   Validation: ${C.validation?.status??"unknown"} (${C.validation?.errors??0} error, ${C.validation?.warnings??0} warning)`)),console.log(j?s.gray(`   Written: ${j}`):s.gray("   Add --write to persist .workspai/reports/workspace-model.json")),_&&process.exit(1);}else if(t==="agent-sync"){let d=a("agent-sync"),{syncWorkspaceAgentGrounding:m,parseAgentGroundingTargets:w}=await import('./workspace-agent-sync-MGCEF4ON.js'),y=n.strict===true||i("--strict"),h=n.write===true||i("--write"),v=i("--dry-run"),x=await m({workspacePath:d,scope:n.scope,agent:n.forAgent,write:h&&!v,dryRun:v,strict:y,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||i("--refresh-context")||i("--refresh"),targets:w(n.target),experimentalHooks:n.experimentalHooks===true||i("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||i("--hydrate-prompts"),projectGrounding:n.projectGrounding??"managed",staleAfterHours:24});if(n.json)console.log(JSON.stringify(x,null,2));else {console.log(s.green(`\u2714 Agent grounding ${h&&!v?"synced":"planned"}`)),console.log(s.gray(`   Index: ${x.indexPath}`)),x.contextPath&&console.log(s.gray(`   Context: ${x.contextPath}`)),x.blockers.length>0&&console.log(s.yellow(`   Blockers: ${x.blockers.slice(0,3).join(" \xB7 ")}`));let R=h&&!v?x.writtenFiles:x.skippedFiles;if(R.length>0&&console.log(s.gray(`   Files: ${R.join(", ")}`)),x.strictViolations.length>0)for(let C of x.strictViolations)console.log(s.red(`\u274C ${C}`));}y&&x.strictViolations.length>0&&process.exit(1);}else if(t==="repair"){let d=e??"status",{approveWorkspaceRepair:m,cancelWorkspaceRepair:w,decideWorkspaceRepair:y,executeWorkspaceRepair:h,inspectWorkspaceRepairCapabilities:v,listWorkspaceRepairTransactions:x,planWorkspaceRepair:R,planWorkspaceRepairProposal:C,readWorkspaceRepairTransaction:$,rollbackWorkspaceRepair:j}=await import('./workspace-repair-engine-OVW4J3DI.js');if(d==="capabilities"){let H,ce;if(n.workspace)H=a("repair capabilities");else try{let ae=b$4({startPath:process.cwd(),strict:false});ae&&ot(ae.workspacePath)&&(H=ae.workspacePath,ce=ae.projectPath??void 0);}catch{}let le=await v(H?{workspacePath:H,project:n.project,projectPath:n.project?void 0:ce}:n.project?{project:n.project}:{});if(n.json===true||i("--json"))console.log(JSON.stringify(le,null,2));else {console.log(s.green(`\u2714 Workspace repair adapters: ${le.adapters.length}`));for(let ae of le.adapters)console.log(s.gray(`   ${ae.id.padEnd(14)} ${ae.support.padEnd(11)} ${ae.ecosystem}`));console.log(s.gray("   Missing tools and unsupported ecosystems fail closed."));}return}let _=a("repair"),N=n.transaction??(["plan","propose","capabilities"].includes(d)?void 0:r),V=()=>{if(!N?.trim())throw new Error(`workspace repair ${d} requires --transaction <id> (or the id as the next positional argument).`);return N.trim()},L;if(d==="plan"){let H=n.card??r;if(!H?.trim())throw new Error("workspace repair plan requires --card <id>.");L=await R({workspacePath:_,cardId:H.trim(),actionId:n.actionId,projectName:n.project,maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(d==="propose"){let H=n.proposal??r;if(!H?.trim())throw new Error("workspace repair propose requires --proposal <path>.");let ce=P.resolve(_,H.trim()),le=P.relative(_,ce);if(le.startsWith("..")||P.isAbsolute(le))throw new Error("The repair proposal file must be inside the canonical workspace.");let ae=await M__default.lstat(ce).catch(()=>{});if(!ae?.isFile()||ae.isSymbolicLink()||ae.size>25*1024*1024)throw new Error("The repair proposal must be a regular JSON file no larger than 25 MiB.");L=await C({workspacePath:_,proposal:await M__default.readJson(ce),maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(d==="approve")L=await m({workspacePath:_,transactionId:V(),approvedBy:n.approvedBy});else if(d==="decide"){if(!n.decision)throw new Error("workspace repair decide requires --decision <choice>.");L=await y({workspacePath:_,transactionId:V(),decision:n.decision});}else if(d==="execute"||d==="resume")L=await h({workspacePath:_,transactionId:V()});else if(d==="status")L=await $({workspacePath:_,transactionId:V()});else if(d==="list")L=await x(_);else if(d==="rollback")L=await j({workspacePath:_,transactionId:V()});else if(d==="cancel")L=await w({workspacePath:_,transactionId:V()});else throw new Error(`Unknown workspace repair action: ${d}. Available: capabilities, plan, propose, approve, decide, execute, resume, status, list, rollback, cancel.`);let q=P.join(_,p.repairTransaction);if(n.json===true||i("--json"))console.log(JSON.stringify(b$5(`workspace repair ${d}`,L,q),null,2));else if(Array.isArray(L)){console.log(s.green(`\u2714 Workspace repair transactions: ${L.length}`));for(let H of L.slice(0,20))console.log(s.gray(`   ${H.transactionId} \xB7 ${H.target.cardId} \xB7 ${H.state}`));}else {console.log(s.green(`\u2714 Workspace repair: ${L.state}`)),console.log(s.gray(`   Transaction: ${L.transactionId}`)),console.log(s.gray(`   Target: ${L.target.cardId}`));for(let H of L.stages)console.log(s.gray(`   ${H.status.padEnd(8)} ${H.kind}: ${H.summary}`));L.decision&&console.log(s.yellow(`   Decision: ${L.decision.reason}`)),console.log(s.gray(`   Evidence: ${p.repairTransaction}`));}Array.isArray(L)||(L.state==="decision-required"&&process.exit(2),(L.state==="rolled-back"||L.state==="failed")&&process.exit(1));return}else if(t==="remediation-plan"){let d=a("remediation-plan"),{buildArtifactRemediationPlan:m,writeArtifactRemediationPlan:w}=await import('./artifact-remediation-plan-HD5K52UJ.js'),y=await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),ciMode:n.ci===true||i("--ci")}),h;if((n.write===true||i("--write"))&&(h=await w(y,d)),n.json===true||i("--json")){console.log(JSON.stringify(b$5("workspace remediation-plan",y,h),null,2));return}console.log(s.green(`\u2714 Artifact remediation plan: ${y.workspace.name}`)),console.log(s.gray(`   Artifacts scanned: ${y.summary.artifactsScanned}`)),console.log(s.gray(`   Cards covered: ${y.summary.cardsCovered}`)),console.log(s.gray(`   CI mode: ${y.source.ciMode?"yes":"no"}`)),console.log(s.gray(`   Actions: ${y.summary.totalActions}`)),console.log(s.gray(`   Risk: safe=${y.summary.risk.safe}, guarded=${y.summary.risk.guarded}, invasive=${y.summary.risk.invasive}`));for(let v of y.actions.slice(0,8))console.log(s.gray(`   \u2022 ${v.cardId}: ${v.title} (${v.mode}, ${v.risk})`));y.actions.length>8&&console.log(s.gray(`   \u2026 ${y.actions.length-8} more action(s)`)),console.log(h?s.gray(`   Written: ${h}`):s.gray("   Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let d=a("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(s.red("\u274C workspace context currently requires --for-agent")),console.log(s.gray("   npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:m,writeWorkspaceAgentContext:w}=await import('./workspace-context-2G6QZ6D3.js'),y=n.strict===true||i("--strict"),h=await m({workspacePath:d,agent:n.forAgent||r||e,scope:n.scope,includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1(),strict:false}),v,x;if((n.write===true||i("--write"))&&(v=await w(h,d),(n.agentSync===true||i("--agent-sync")||n.noAgentSync!==true)&&!i("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:$,parseAgentGroundingTargets:j}=await import('./workspace-agent-sync-MGCEF4ON.js');if(x=await $({workspacePath:d,scope:n.scope,agent:h.agent,write:true,refreshContext:false,strict:y,preset:n.preset==="minimal"?"minimal":"enterprise",targets:j(n.target),projectGrounding:n.projectGrounding??"managed"}),n.json||console.log(s.gray(`   Agent grounding synced: ${x.writtenFiles.length} file(s) updated`)),y&&x.strictViolations.length>0){for(let _ of x.strictViolations)console.log(s.red(`\u274C ${_}`));process.exit(1);}}let R=y&&h.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...h,...v?{outputPath:v}:{},...x?{agentGroundingSync:x}:{}},null,2)),R&&process.exit(1);return}if(console.log(s.green(`\u2714 Workspace context: ${h.workspace.name}`)),console.log(s.gray(`   Agent: ${h.agent}`)),console.log(s.gray(`   Scope: ${h.scope.activeProject??h.scope.requested}`)),console.log(s.gray(`   Projects included: ${h.projects.length}`)),console.log(s.gray(`   Safe commands: ${h.safeCommands.length}`)),console.log(s.gray(`   Validation: ${h.validation.status} (${h.validation.errors} error, ${h.validation.warnings} warning)`)),console.log(v?s.gray(`   Written: ${v}`):s.gray("   Add --write to persist .workspai/reports/workspace-context-agent.json")),R){for(let C of h.validation.issues)console.log(s.red(`\u274C ${C.severity}:${C.code}:${C.target}`));process.exit(1);}}else if(t==="snapshot"){let d=a("snapshot"),{buildWorkspaceModelSnapshot:m,writeWorkspaceModelSnapshot:w}=await import('./workspace-intelligence-GFJKIWBX.js'),y=await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),h=await w(y,d);if(n.json){console.log(JSON.stringify(b$5("workspace snapshot",y,h),null,2));return}console.log(s.green(`\u2714 Workspace model snapshot: ${y.model.workspace.name}`)),console.log(s.gray(`   Hash: ${y.modelHash}`)),console.log(s.gray(`   Projects: ${y.model.summary.projectCount}`)),console.log(s.gray(`   Workspace type: ${y.model.identity.workspaceType}`)),console.log(s.gray(`   Written: ${h}`));}else if(t==="diff"){let d=a("diff"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(s.gray("   npx workspai workspace diff --from git --json  (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:w,writeWorkspaceModelDiff:y}=await import('./workspace-intelligence-GFJKIWBX.js'),h;try{h=await w({workspacePath:d,fromPath:m,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:R.message,context:{workspacePath:d,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),R}let v=await y(h,d);if(n.json){console.log(JSON.stringify(b$5("workspace diff",h,v),null,2));return}let x=h.summary.changed?s.yellow:s.green;console.log(x(`\u2714 Workspace model diff: ${h.summary.changed?"changed":"clean"}`)),console.log(s.gray(`   From: ${h.fromRef}`)),console.log(s.gray(`   Added projects: ${h.summary.addedProjects}`)),console.log(s.gray(`   Removed projects: ${h.summary.removedProjects}`)),console.log(s.gray(`   Changed projects: ${h.summary.changedProjects}`)),console.log(s.gray(`   Workspace changes: ${h.summary.workspaceChanges}`)),console.log(s.gray(`   Validation changes: ${h.summary.validationChanges}`)),h.git?.available&&console.log(s.gray(`   Git: ${h.git.dirty?"dirty":"clean"} (${h.summary.gitChangedFiles} mapped change(s))`));for(let R of h.changes.slice(0,12))console.log(s.gray(`   \u2022 ${R.type} ${R.target}: ${R.message}`));h.changes.length>12&&console.log(s.gray(`   \u2026 ${h.changes.length-12} more change(s)`)),console.log(s.gray(`   Written: ${v}`));}else if(t==="impact"){let d=a("impact"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:w,writeWorkspaceImpact:y}=await import('./workspace-intelligence-GFJKIWBX.js'),h;try{h=await w({workspacePath:d,fromPath:m,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:R.message,context:{workspacePath:d,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),R}let v=await y(h,d);if(n.json){console.log(JSON.stringify(b$5("workspace impact",h,v),null,2));return}let x=h.summary.risk==="critical"||h.summary.risk==="high"?s.red:h.summary.risk==="medium"?s.yellow:s.green;console.log(x(`\u2714 Workspace impact: ${h.summary.risk}`)),console.log(s.gray(`   From: ${h.fromRef}`)),console.log(s.gray(`   Affected projects: ${h.summary.affectedProjects}`)),console.log(s.gray(`   Workspace items: ${h.summary.workspaceItems}`)),console.log(s.gray(`   Recommended commands: ${h.summary.recommendedCommands}`));for(let R of h.affectedProjects.slice(0,8))console.log(s.gray(`   \u2022 ${R.title}: ${R.summary}`));h.affectedProjects.length>8&&console.log(s.gray(`   \u2026 ${h.affectedProjects.length-8} more project(s)`)),console.log(s.gray(`   Written: ${v}`));}else if(t==="verify"){let d=a("verify"),{buildWorkspaceVerify:m,writeWorkspaceVerify:w,evaluateWorkspaceVerifyGate:y}=await import('./workspace-verify-B7HEFYO6.js'),h=await m({workspacePath:d,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),v=await w(h,d),x=y(h,{strict:n.strict===true||i("--strict")}),R=x.exitCode,{recordWorkspaceHistory:C,historyEntryFromVerify:$}=await import('./workspace-history-EQG5UBKW.js');if(await C(d,$(h,x.passed)),n.json){console.log(JSON.stringify(b$5("workspace verify",{...h,gate:x},v,R),null,2)),R!==0&&process.exit(R);return}let j=h.summary.verdict==="ready"?s.green:h.summary.verdict==="needs-attention"?s.yellow:s.red;console.log(j(`\u2714 Workspace verify: ${h.summary.verdict}`)),console.log(s.gray(`   Freshness: ${h.freshness.verdict}`)),console.log(s.gray(`   Impact risk: ${h.impact.risk}`)),console.log(s.gray(`   Steps: ${h.steps.length}`)),console.log(s.gray(`   Passed ${h.summary.stepsPassed}, warn ${h.summary.stepsWarn}, failed ${h.summary.stepsFailed}, missing ${h.summary.stepsMissing}`));for(let _ of h.steps.slice(0,10))console.log(s.gray(`   \u2022 ${_.id}: ${_.status} \u2014 ${_.message}`));if(h.steps.length>10&&console.log(s.gray(`   \u2026 ${h.steps.length-10} more step(s)`)),h.policyViolations.length>0){console.log(s.gray(`   Policy (${h.policyMode}): ${h.policyViolations.length} violation(s)`));for(let _ of h.policyViolations.slice(0,5)){let N=_.severity==="error"?s.red("\u2717"):s.yellow("!");console.log(`   ${N} [${_.source}] ${_.code}: ${_.message}`);}}console.log(s.gray(`   Gate (${x.mode}): ${x.passed?"passed":"blocked"}`));for(let _ of x.reasons.slice(0,5))console.log(s.red(`   \u2717 ${_}`));console.log(s.gray(`   Written: ${v}`)),R!==0&&process.exit(R);}else if(t==="graph"){let d=a("graph"),{buildWorkspaceModel:m,workspaceModelProjectTopology:w}=await import('./workspace-model-DUGPW5IB.js'),{buildGraphEmit:y,renderGraphDot:h,renderGraphMermaid:v,explainGraphNode:x}=await import('./workspace-graph-2A5THUCI.js'),R=(e||"emit").toLowerCase(),C=["emit","dot","mermaid","jsonld","graphml","gexf","explain","entities","search","benchmark","benchmark-suite","evidence","path","overlay"];if(!C.includes(R)){let D=`Unknown workspace graph mode '${R}'.`;n.json?console.log(JSON.stringify(c$1({operation:`workspace graph ${R}`,code:"workspace.graph.mode.unsupported",message:D,exitCode:2,context:{mode:R,supportedModes:C},examples:["workspai workspace graph emit --json"]}),null,2)):(console.log(s.red(`\u274C ${D}`)),console.log(s.gray(`   Supported: ${C.join(", ")}`))),process.exit(2);}let $=new Set(["benchmark","benchmark-suite","entities","evidence","path","search"]),j=n.refreshGraph===true||i("--refresh-graph"),_=$.has(R)&&!j?await(await import('./workspace-knowledge-graph-snapshot-XWJRUMAC.js')).readWorkspaceKnowledgeGraphSnapshot(d):null,N=_?.status==="hit"?_.graph:null,V=_?.status==="hit"?_.model:await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),L=w(V);L||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:R,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(s.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let q$1=async()=>{if(N)return N;let{buildWorkspaceKnowledgeGraph:D}=await import('./workspace-knowledge-graph-OUTCLYS2.js'),{hashWorkspaceModel:G}=await import('./workspace-model-hash-ZXYPIGCW.js'),{readWorkspaceContract:oe}=await import('./workspace-contract-VWPOIYHJ.js'),te=null;try{te=(await oe({workspacePath:d})).contract;}catch{}return D({...u(),workspacePath:d,workspace:{name:V.workspace.name,...V.workspace.profile?{profile:V.workspace.profile}:{}},projects:V.projects.map(z=>({id:z.name,path:z.path,...z.absolutePath?{absolutePath:z.absolutePath}:{},runtime:z.runtime,runtimeCandidates:z.runtimeCandidates,framework:z.framework,kind:z.kind,category:z.category,...z.governance?{governance:z.governance}:{},...z.kit?{kit:z.kit}:{}})),projectTopology:L,contract:te,now:new Date(V.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:G(V)}})};if(R==="dot"||R==="mermaid"){let D=R==="dot"?h(L):v(L),G=l();if(G){let oe=P.resolve(d,G);await M__default.outputFile(oe,`${D}
-`,"utf8"),n.json?console.log(JSON.stringify(b$5(`workspace graph ${R}`,{format:R,nodeCount:L.stats.nodeCount,edgeCount:L.stats.edgeCount},oe),null,2)):(console.log(s.green(`\u2714 Workspace dependency graph exported as ${R}`)),console.log(s.gray(`   Written: ${oe}`)));return}console.log(D);return}if(R==="jsonld"||R==="graphml"||R==="gexf"){let D=await q$1(),{renderWorkspaceKnowledgeGraphGexf:G,renderWorkspaceKnowledgeGraphGraphMl:oe,renderWorkspaceKnowledgeGraphJsonLd:te}=await import('./workspace-knowledge-graph-export-UYAYFTWX.js'),z=R==="jsonld"?te(D):R==="graphml"?oe(D):G(D),ee=l();if(ee){let Y=P.resolve(d,ee);await M__default.outputFile(Y,`${z}
-`,"utf8"),n.json?console.log(JSON.stringify(b$5(`workspace graph ${R}`,{format:R,entityCount:D.entities.length,relationCount:D.relations.length,proofCount:D.proofs.length},Y),null,2)):(console.log(s.green(`\u2714 Workspace knowledge graph exported as ${R}`)),console.log(s.gray(`   Written: ${Y}`)));return}console.log(z);return}if(R==="explain"){let D=(n.scope?.replace(/^project:/,"")||r||"").trim();D||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(s.red("\u274C workspace graph explain requires a project.")),console.log(s.gray("   npx workspai workspace graph explain <project> --json")),console.log(s.gray("   npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let G=x(L,D);if(n.json){console.log(JSON.stringify(G,null,2)),G.found||process.exit(1);return}G.found||(console.log(s.red(`\u274C Project not found in dependency graph: ${D}`)),process.exit(1)),console.log(s.green(`\u2714 Graph explain: ${G.project}`)),G.centrality&&console.log(s.gray(`   Centrality: fanIn ${G.centrality.fanIn}, fanOut ${G.centrality.fanOut}, reach ${G.centrality.reach}, betweenness ${G.centrality.betweenness}${G.centrality.isHotspot?" (hotspot)":""}`)),console.log(s.gray(`   Direct dependents: ${G.directDependents.join(", ")||"none"}`)),console.log(s.gray(`   Direct dependencies: ${G.directDependencies.join(", ")||"none"}`)),console.log(s.gray(`   Blast radius (transitive dependents): ${G.transitiveDependents.length}`));for(let oe of G.transitiveDependents.slice(0,10))console.log(s.gray(`   \u2022 ${oe.id} (d${oe.distance}, via ${oe.via??"\u2014"})`));return}if(R==="entities"){let D=await q$1(),{queryKnowledgeEntities:G}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),oe=(r||n.kind||"").trim()||void 0;if(oe){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:J}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');J.includes(oe)||(console.log(s.red(`\u274C Unknown graph entity kind: ${oe}`)),console.log(s.gray(`   Supported: ${J.join(", ")}`)),process.exit(1));}let te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=G(D,oe,te),ee=n.limit??c("--limit"),Y=ee===void 0?void 0:Number.parseInt(ee,10);Y!==void 0&&(!Number.isFinite(Y)||Y<1||Y>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let I=Y===void 0?z:z.slice(0,Y);if(n.json){console.log(JSON.stringify({schemaVersion:D.schemaVersion,generatedAt:D.generatedAt,kind:oe??null,...te?{projectId:te}:{},count:I.length,totalMatches:z.length,truncated:I.length<z.length,entities:I},null,2));return}console.log(s.green(`\u2714 Workspace graph entities${oe?`: ${oe}`:""}`)),console.log(s.gray(`   Count: ${I.length}/${z.length}${I.length<z.length?" (bounded)":""}`));for(let J of I)console.log(s.gray(`   \u2022 ${J.kind}: ${J.label} [${J.id}]`));return}if(R==="benchmark-suite"){let D=(r||"agent-core.v1").trim(),{WORKSPACE_INTELLIGENCE_BENCHMARK_REPORT_PATH:G,WORKSPACE_INTELLIGENCE_BENCHMARK_SUITES:oe,buildWorkspaceIntelligenceBenchmark:te,writeWorkspaceIntelligenceBenchmark:z}=await import('./workspace-intelligence-benchmark-R5MEGJQS.js');D in oe||(console.log(s.red(`\u274C Unknown benchmark suite: ${D}`)),console.log(s.gray(`   Supported: ${Object.keys(oe).join(", ")}`)),process.exit(2));let ee=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(ee)||ee<1||ee>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let Y=await q$1(),I=await te({workspacePath:d,graph:Y,suite:D,limit:ee,...n.from?{baselineEvaluationPath:n.from}:{}}),K=n.write===true||i("--write")||!!l()?await z(d,I,l()??G):void 0;if(n.json){console.log(JSON.stringify(b$5("workspace graph benchmark-suite",I,K),null,2));return}console.log(s.green(`\u2714 Workspace Intelligence benchmark: ${I.suite.title}`)),console.log(s.gray(`   Scenarios: ${I.retrievalSummary.matchedScenarioCount}/${I.retrievalSummary.scenarioCount} matched \xB7 ${I.retrievalSummary.status}`)),console.log(s.gray(`   Median estimated retrieval: ${I.retrievalSummary.medianRetrievalEstimatedTokens} tokens \xB7 p95 ${I.retrievalSummary.p95RetrievalEstimatedTokens}`)),console.log(s.gray(`   Median estimated payload reduction: ${I.retrievalSummary.medianEstimatedReductionPercent}%`)),console.log(s.gray(`   Model evaluation: ${I.evaluation.availability} (${I.evaluation.provenance})`)),console.log(s.yellow(`   ${I.methodology.claimBoundary}`)),K&&console.log(s.gray(`   Written: ${K}`));return}if(R==="search"||R==="benchmark"){let D=(r||"").trim();D||(console.log(s.red(`\u274C workspace graph ${R} requires a search query.`)),console.log(s.gray(`   npx workspai workspace graph ${R} "authentication endpoint" --json`)),process.exit(1));let G=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(G)||G<1||G>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let oe=await q$1();if(R==="benchmark"){let I=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,{buildWorkspaceGraphTokenEfficiencyReport:J}=await import('./workspace-graph-token-efficiency-YHXFGH3Z.js'),K=await J({workspacePath:d,graph:oe,query:D,limit:G,...I?{projectId:I}:{}});n.json?console.log(JSON.stringify(K,null,2)):(console.log(s.green(`\u2714 Graph retrieval benchmark: ${D}`)),console.log(s.gray(`   Estimated tokens: ${K.corpus.estimatedTokens} corpus \u2192 ${K.retrieval.estimatedTokens} bounded retrieval`)),console.log(s.gray(`   Estimated payload reduction: ${K.savings.reductionRatio}\xD7 (${K.savings.reductionPercent}%)`)),console.log(s.gray(`   Matches: ${K.retrieval.matchCount}`)),console.log(s.yellow(`   ${K.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:te}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=n.kind?String(n.kind).trim():void 0;if(ee){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:I}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');I.includes(ee)||(console.log(s.red(`\u274C Unknown graph entity kind: ${ee}`)),console.log(s.gray(`   Supported: ${I.join(", ")}`)),process.exit(1));}let Y=te(oe,{query:D,limit:G,...ee?{kind:ee}:{},...z?{projectId:z}:{},projection:"agent"});if(n.json)console.log(JSON.stringify(Y,null,2));else {console.log(s.green(`\u2714 Workspace graph search: ${D}`)),console.log(s.gray(`   ${Y.entities.length}/${Y.totalMatches} match(es)${Y.truncated?" (bounded)":""}`));for(let I of Y.entities)console.log(s.gray(`   \u2022 ${I.kind}: ${I.label} [${I.id}]`));}return}if(R==="evidence"){let D=(r||"").trim();D||(console.log(s.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let G=await q$1(),{queryKnowledgeEvidence:oe}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=oe(G,D,te);if(n.json)console.log(JSON.stringify(z,null,2));else if(z.found){console.log(s.green(`\u2714 Graph evidence: ${D}`));for(let ee of z.proofs)console.log(s.gray(`   \u2022 ${ee.artifact}${ee.pointer?`#${ee.pointer}`:""} [${ee.provider}/${ee.trust}/${ee.confidence}]`));}else {console.log(s.red(z.candidates.length>0?`\u274C Graph query is ambiguous: ${D}`:`\u274C Graph entity or relation not found: ${D}`));for(let ee of z.candidates.slice(0,10))console.log(s.gray(`   \u2022 ${ee}`));}z.found||process.exit(1);return}if(R==="path"){let D=(r||"").trim(),G=(o||"").trim();(!D||!G)&&(console.log(s.red("\u274C workspace graph path requires <from> and <to>.")),console.log(s.gray("   npx workspai workspace graph path <from> <to> --json")),process.exit(1));let oe=await q$1(),{queryKnowledgePath:te}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=te(oe,D,G,z);if(n.json)console.log(JSON.stringify(ee,null,2));else if(ee.found){console.log(s.green(`\u2714 Graph proof path: ${D} \u2192 ${G}`));for(let Y of ee.hops)console.log(s.gray(`   \u2022 ${Y.from} ${Y.direction==="forward"?"\u2192":"\u2190"} ${Y.to} [${Y.kind}]`));console.log(s.gray(`   Proofs: ${ee.proofs.length}`));}else console.log(s.red(`\u274C No graph path found between ${D} and ${G}.`));ee.found||process.exit(1);return}if(R==="overlay"){let D=(n.from||r||"").trim();D||(console.log(s.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(s.gray("   npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let G=P.resolve(d,D),oe;try{oe=JSON.parse(await M__default.readFile(G,"utf8"));}catch(Te){console.log(s.red(`\u274C Could not read the base knowledge graph: ${Te instanceof Error?Te.message:String(Te)}`)),process.exit(1);}let te=oe&&typeof oe=="object"?oe:{},z=te.graph,ee=z&&typeof z=="object"?z:{},Y=te.schemaVersion===q.knowledgeGraph?te:te.knowledgeGraph??ee.knowledgeGraph;(!Y||typeof Y!="object"||Y.schemaVersion!==q.knowledgeGraph)&&(console.log(s.red(`\u274C Base file does not contain a ${q.knowledgeGraph} document.`)),process.exit(1));let I=await q$1(),{buildWorkspaceKnowledgeGraphChangeOverlay:J}=await import('./workspace-knowledge-graph-change-overlay-FIIAFLO6.js'),K=J(Y,I);if(n.json){console.log(JSON.stringify(K,null,2));return}console.log(s.green("\u2714 Workspace graph change overlay")),console.log(s.gray(`   Base: ${D}`)),console.log(s.gray(`   Risk: ${K.summary.risk}`)),console.log(s.gray(`   Entities: +${K.summary.entityAdds} -${K.summary.entityRemovals} ~${K.summary.entityChanges}`)),console.log(s.gray(`   Relations: +${K.summary.relationAdds} -${K.summary.relationRemovals} ~${K.summary.relationChanges}`)),console.log(s.gray(`   Proofs: +${K.summary.proofAdds} -${K.summary.proofRemovals} ~${K.summary.proofChanges}`)),console.log(s.gray(`   Impacted: ${K.summary.impactedEntities} entities \xB7 ${K.summary.changedArtifacts} proof artifacts`));return}let H=y(L),{writeWorkspaceModel:ce}=await import('./workspace-model-DUGPW5IB.js');await ce(V,d,{refreshKnowledgeGraph:j});let le=await M__default.readJson(P.join(d,p.knowledgeGraph)),ae={...H,knowledgeGraph:le},Be=l();if(Be){let D=P.resolve(d,Be);await M__default.outputFile(D,`${JSON.stringify(ae,null,2)}
-`,"utf8"),n.json?console.log(JSON.stringify(b$5("workspace graph emit",{format:"json",nodeCount:L.stats.nodeCount,edgeCount:L.stats.edgeCount,entityCount:le.entities.length,relationCount:le.relations.length,proofCount:le.proofs.length},D),null,2)):(console.log(s.green("\u2714 Workspace graph artifact exported as JSON")),console.log(s.gray(`   Written: ${D}`)));return}if(n.json){console.log(JSON.stringify(ae,null,2));return}console.log(s.green("\u2714 Workspace dependency graph")),console.log(s.gray(`   Nodes: ${H.graph.stats.nodeCount}`)),console.log(s.gray(`   Edges: ${H.graph.stats.edgeCount} (inferred ${H.graph.stats.inferredEdges}, contract ${H.graph.stats.contractEdges}, manual ${H.graph.stats.manualEdges})`)),console.log(s.gray(`   Integrity: ${H.integrity.ok?"ok":"issues"} (cycles ${H.integrity.stats.cycleCount}, dangling ${H.integrity.stats.danglingCount}, orphans ${H.integrity.stats.orphanCount})`)),console.log(s.gray(`   Hotspots: ${H.hotspots.join(", ")||"none"}`)),console.log(s.gray(`   Knowledge: ${le.quality.entityCount} entities \xB7 ${le.quality.relationCount} relations \xB7 ${le.quality.proofCount} proofs \xB7 ${le.providers.length} providers`));let qe=(le.source.inputs?.scopes??[]).filter(D=>D.truncated),je=le.quality.completeness;if(qe.length>0?console.log(s.yellow(`   Inventory: emergency-bounded \u2014 ${qe.map(D=>`${D.kind}:${D.id} indexed ${D.fileCount}/${D.eligibleFileCountExact===false?"at-least-":""}${D.eligibleFileCount??D.fileCount} eligible files`).join(", ")}`)):console.log(s.gray(`   Inventory: complete \u2014 ${je?.inventory.indexedFiles??(le.source.inputs?.scopes??[]).reduce((D,G)=>D+G.fileCount,0)} eligible files indexed across ${je?.inventory.scopeCount??(le.source.inputs?.scopes??[]).length} scope(s)`)),je){let D=`${je.providers.complete} complete \xB7 ${je.providers.bounded} adaptive-bounded \xB7 ${je.providers.notApplicable} not-applicable \xB7 ${je.providers.failed} failed`;console.log(je.status==="complete"?s.gray(`   Provider coverage: ${D}`):s.yellow(`   Provider coverage: ${D}`));}console.log(s.gray("   Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(s.gray("   Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let d=a("watch"),{runWorkspaceWatch:m}=await import('./workspace-watch-TQYAMLIV.js'),w=n.once===true||i("--once"),y=n.graphStream===true||i("--graph-stream"),h=n.json===true||y,v=y?new(await import('./workspace-graph-stream-XGSRDRLI.js')).WorkspaceGraphStreamPublisher({workspacePath:d}):null,x=new AbortController,R=()=>x.abort();process.once("SIGINT",R),process.once("SIGTERM",R),h||console.log(s.green("\u2714 Workspace watch (model + graph kept in memory)")),await m({workspacePath:d,once:w,signal:x.signal,buildOptions:{workspacePath:d,observableScanDepth:p$1()},onProgress:C=>{h||console.error(s.gray(`   ${C}`));},onModel:v?async C=>{let $=(await import('./workspace-model-DUGPW5IB.js')).workspaceModelProjectTopology(C);if(!$)return;let{buildWorkspaceKnowledgeGraph:j}=await import('./workspace-knowledge-graph-OUTCLYS2.js'),{readWorkspaceContract:_}=await import('./workspace-contract-VWPOIYHJ.js'),N=null;try{N=(await _({workspacePath:d})).contract;}catch{}let V=await j({...u(),workspacePath:d,workspace:{name:C.workspace.name,...C.workspace.profile?{profile:C.workspace.profile}:{}},projects:C.projects.map(L=>({id:L.name,path:L.path,...L.absolutePath?{absolutePath:L.absolutePath}:{},runtime:L.runtime,runtimeCandidates:L.runtimeCandidates,framework:L.framework,...L.kit?{kit:L.kit}:{}})),projectTopology:$,contract:N,now:new Date(C.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-ZXYPIGCW.js')).hashWorkspaceModel(C)}});console.log(JSON.stringify(v.publish(C,V)));}:void 0,emit:C=>{if(y)return;if(h){console.log(JSON.stringify(C));return}if(C.kind==="ready"){console.log(s.gray(`   Ready: ${C.graph.nodeCount} nodes, ${C.graph.edgeCount} edges (hash ${C.modelHash.slice(0,12)})`));return}if(C.kind==="error"){console.error(s.red(`   \u2717 Rebuild failed: ${C.error??"unknown error"}`));return}if(C.kind==="unchanged"){console.log(s.gray(`   No structural change (${C.mode}, ${C.durationMs}ms)`));return}let $=[];C.changedProjects.length>0&&$.push(`changed: ${C.changedProjects.join(", ")}`),C.addedProjects.length>0&&$.push(`added: ${C.addedProjects.join(", ")}`),C.removedProjects.length>0&&$.push(`removed: ${C.removedProjects.join(", ")}`),C.graph.edgesAdded.length>0&&$.push(`+${C.graph.edgesAdded.length} edges`),C.graph.edgesRemoved.length>0&&$.push(`-${C.graph.edgesRemoved.length} edges`),console.log(s.cyan(`   \u21BB Changed (${C.mode}, ${C.durationMs}ms): ${$.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",R),process.removeListener("SIGTERM",R),!h&&!w&&console.log(s.gray("   Watch stopped."));return}else if(t==="sync"){let d=a("sync"),{syncWorkspaceProjects:m}=await import('./workspace-PAXTJCMH.js');n.json||console.log(s.cyan(`\u{1F4C2} Scanning workspace: ${P.basename(d)}`));let w=await m(d,n.json===true);await po(d,{silent:n.json===true});let{syncWorkspaceProjectLenses:y}=await import('./project-intelligence-lens-YWICXW6P.js'),h=await y({workspacePath:d,mode:n.projectGrounding??"managed"}),{readWorkspaceRegistrySummary:v}=await import('./workspace-registry-summary-4KX4QD55.js'),x=await v(d);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:d,registry:w,contractSynced:true,projectLenses:{synced:h.projects.length,skipped:h.skipped},registrySummary:x},null,2));}else if(t==="registry"){let d=a("registry"),m=e||"status";m!=="status"&&(console.log(s.red(`\u274C Unknown workspace registry action: ${m}`)),console.log(s.gray("   npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:w,resolveWorkspaceRegisteredProjects:y}=await import('./workspace-registry-summary-4KX4QD55.js'),h=await w(d);if(n.json){console.log(JSON.stringify(h,null,2));return}let v=await y(d);console.log(s.cyan("Workspace registry")),console.log(s.gray(`   Authority: ${h.authority}`)),console.log(s.gray(`   Projects: ${h.projectCount}`)),console.log(s.gray(`   Summary: ${h.registrySummaryPath}`)),v.summary.projectCount===0&&console.log(s.yellow("   No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let d=a("foundation"),m=e||"ensure";m!=="ensure"&&(console.log(s.red(`\u274C Unknown workspace foundation action: ${m}`)),console.log(s.gray("   npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:w}=await import('./workspace-foundation-X7LOGTS3.js'),y=await w(d,{force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(y,null,2));return}y.created.length>0?console.log(s.green(`\u2714 Workspace foundation ensured: ${y.created.join(", ")}`)):console.log(s.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let d=a("policy"),m=await Kf(d,e,r,o,n.json===true||i("--json"));m!==0&&process.exit(m);}else if(t==="contract"){let d=a("contract"),{buildWorkspaceContractGraph:m,readWorkspaceContract:w,syncWorkspaceContract:y,verifyWorkspaceContract:h,writeWorkspaceContract:v,WORKSPACE_CONTRACT_PATH:x}=await import('./workspace-contract-VWPOIYHJ.js'),R=e||"inspect",C=l(),$=R==="graph"||R==="sync"?void 0:C;try{if(R==="init"){let j=await v({workspacePath:d,outputPath:$,force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(s.green(`\u2714 Workspace contract initialized: ${j.contractPath}`)),console.log(s.gray(`   Projects: ${j.contract.projects.length}`));return}if(R==="inspect"){let j=await w({workspacePath:d,contractPath:$});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(s.green(`\u2714 Workspace contract: ${j.contractPath}`)),console.log(s.gray(`   Workspace: ${j.contract.workspace.name}`)),console.log(s.gray(`   Projects: ${j.contract.projects.length}`)),console.log(s.gray(`   Schema: v${j.contract.schemaVersion}`));return}if(R==="sync"){let j=await y({workspacePath:d,strict:n.strict===true||i("--strict")});if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(s.green(`\u2714 Workspace contract synchronized: ${j.contractPath}`)),console.log(s.gray(`   Projects: ${j.contract.projects.length}`)),console.log(s.gray(`   Added: ${j.addedProjects.join(", ")||"none"}`)),console.log(s.gray(`   Updated: ${j.updatedProjects.join(", ")||"none"}`));return}if(R==="verify"){let j=await h({workspacePath:d,contractPath:$,strict:n.strict===true||i("--strict")}),{writeWorkspaceContractVerifyEvidence:_}=await import('./workspace-contract-VWPOIYHJ.js'),N=await _({workspacePath:d,result:j});if(n.json)console.log(JSON.stringify({...j,evidencePath:N},null,2));else {let V=j.status==="passed"?s.green:s.red;console.log(V(`\u2714 Workspace contract verification ${j.status}: ${j.contractPath}`)),console.log(s.gray(`   Projects: ${j.projectCount}`));for(let L of j.checks){let q=L.status==="passed"?"\u2714":"\u2718";console.log(s.gray(`   ${q} ${L.id}: ${L.message}`));}for(let L of j.violations)console.log(s.gray(`   Violation: ${L}`));}(j.status==="failed"||j.status!=="passed"&&n.strict)&&process.exit(1);return}if(R==="graph"){let j=await m({workspacePath:d,contractPath:$});if(C){let _=P.resolve(d,C);await M__default.outputFile(_,`${JSON.stringify(j,null,2)}
-`,"utf8"),n.json?console.log(JSON.stringify(b$5("workspace contract graph",{projectCount:j.graph.summary.projectCount,relationshipEdges:j.graph.summary.relationshipEdges,entityCount:j.graph.summary.entityCount,knowledgeRelations:j.graph.summary.knowledgeRelations,proofCount:j.graph.summary.proofCount},_),null,2)):(console.log(s.green("\u2714 Workspace contract graph exported as JSON")),console.log(s.gray(`   Written: ${_}`)));return}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(s.green(`\u2714 Workspace contract graph: ${j.contractPath}`)),console.log(s.gray(`   Workspace: ${j.graph.workspace.name}`)),console.log(s.gray(`   Projects: ${j.graph.summary.projectCount}`)),console.log(s.gray(`   Dependencies: ${j.graph.summary.dependencyEdges}`)),console.log(s.gray(`   Event links: ${j.graph.summary.eventEdges}`)),console.log(s.gray(`   Evidence-backed relationships: ${j.graph.summary.relationshipEdges} (${j.graph.summary.inferredEdges} inferred, ${j.graph.summary.authoritativeEdges} authoritative)`)),console.log(s.gray(`   Connected projects: ${j.graph.summary.connectedProjects}/${j.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(j.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(j.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(s.gray(`   Orphans: ${j.graph.summary.orphanProjects} \xB7 Hotspots: ${j.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${j.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${j.graph.summary.hasCycle?"yes":"no"}`)),console.log(s.gray(`   Knowledge: ${j.graph.summary.entityCount} entities \xB7 ${j.graph.summary.knowledgeRelations} relations \xB7 ${j.graph.summary.proofCount} proofs \xB7 ${j.graph.summary.providerCount} providers \xB7 ${j.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(s.gray(`   Ports: ${j.graph.summary.portCount}`));for(let _ of j.graph.nodes){let N=_.ports.map(L=>`${L.name}:${L.port}`).join(", ")||"none",V=_.operationalProfile?` risk=${_.operationalProfile.weight}/${_.operationalProfile.verificationPriority}`:"";console.log(s.gray(`   \u2022 ${_.id} (${_.runtime||"unknown"}${_.framework?`/${_.framework}`:""}) ports=${N} manifests=${_.files.manifests.length}${V}`));}for(let _ of j.graph.edges){let N=_.type==="event"?`event:${_.label}`:_.label;console.log(s.gray(`     ${_.from} -> ${_.to} [${N}]`));}if(j.graph.dependencyGraph.edges.length>0){console.log(s.gray("   Evidence-backed dependency direction (consumer -> dependency):"));for(let _ of j.graph.dependencyGraph.edges)console.log(s.gray(`     ${_.from} -> ${_.to} [${_.kind}/${_.source}/${_.confidence}] evidence=${_.evidence.length}`));}for(let _ of j.graph.dependencyGraph.diagnostics||[])console.log(s.gray(`   ${_.severity}: ${_.message}`));return}console.log(s.red(`\u274C Unknown workspace contract action: ${R}`)),console.log(s.white(`   npx workspai workspace contract init|inspect|sync|verify|graph [--output ${x}]`)),process.exit(1);}catch(j){n.json&&(console.log(JSON.stringify({command:`workspace contract ${R}`,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${R}.failed`,message:j.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace contract ${R} failed: ${j.message}`)),process.exit(1);}}else if(t==="share"){let d=a("share"),m=l()||e,{createWorkspaceShareBundle:w}=await import('./workspace-PAXTJCMH.js'),y=await w(d,{outputPath:m,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:d,bundlePath:y,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(s.green(`\u2714 Workspace share bundle exported: ${y}`)),console.log(s.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let d=a("export");try{let{exportWorkspaceArchive:m}=await import('./workspace-archive-3AURTMYA.js'),w=n.archiveCompression?.trim().toLowerCase()??"store";if(w!=="store"&&w!=="deflate")throw new Error("--archive-compression must be store or deflate.");let y=await m({workspacePath:d,outputPath:l()||e,includeEnv:n.includeEnv===true||i("--include-env"),compression:w});if(n.json){console.log(JSON.stringify(y,null,2));return}let h=(y.bytesWritten/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive exported: ${y.archivePath}`)),console.log(s.gray(`   Files: ${y.manifest.files.length}`)),console.log(s.gray(`   Size: ${h} MB`)),y.manifest.security.envFilesIncluded||console.log(s.gray("   Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(m){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:m.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive export failed: ${m.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let d=r;d||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:m,inspectWorkspaceArchive:w,verifyWorkspaceArchive:y}=await import('./workspace-archive-3AURTMYA.js');try{if(e==="inspect"){let v=await w({archivePathOrUrl:d,safety:b()});if(n.json){console.log(JSON.stringify(v,null,2));return}let x=(v.totalBytes/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive: ${v.archivePath}`)),console.log(s.gray(`   Workspace: ${v.manifest.workspaceName}`)),console.log(s.gray(`   Exported: ${v.manifest.exportedAt}`)),console.log(s.gray(`   Exporter: ${v.manifest.exportedBy||"unknown"}`)),console.log(s.gray(`   Files: ${v.fileCount}`)),console.log(s.gray(`   Payload: ${x} MB`));return}if(e==="doctor"){let v=await m({archivePathOrUrl:d,strict:n.strict===true||i("--strict"),safety:b()});if(n.json)console.log(JSON.stringify(v,null,2));else {let x=v.status==="passed"?s.green:v.status==="warning"?s.yellow:s.red;console.log(x(`\u2714 Workspace archive doctor ${v.status}: ${v.archivePath}`)),console.log(s.gray(`   Workspace: ${v.workspaceName}`)),console.log(s.gray(`   Files: ${v.fileCount}`));for(let R of v.checks){let C=R.status==="passed"?"\u2714":R.status==="warning"?"\u26A0":"\u2718";console.log(s.gray(`   ${C} ${R.id}: ${R.message}`));}for(let R of v.recommendedActions)console.log(s.gray(`   Next: ${R}`));}(v.status==="failed"||v.status==="warning"&&n.strict)&&process.exit(1);return}let h=await y({archivePathOrUrl:d,requireChecksums:n.strict===true||i("--strict"),safety:b()});if(n.json)console.log(JSON.stringify(h,null,2));else if(h.status==="passed")console.log(s.green(`\u2714 Workspace archive verified: ${h.archivePath}`)),console.log(s.gray(`   Files: ${h.verifiedFiles}/${h.fileCount}`));else {let v=h.status==="failed"?s.red:s.yellow;console.log(v(`\u274C Workspace archive verification ${h.status}: ${h.archivePath}`)),h.missingArchiveEntries.length&&console.log(s.gray(`   Missing entries: ${h.missingArchiveEntries.join(", ")}`)),h.extraArchiveEntries.length&&console.log(s.gray(`   Unexpected entries: ${h.extraArchiveEntries.join(", ")}`)),h.mismatches.length&&console.log(s.gray(`   Mismatches: ${h.mismatches.map(x=>x.path).join(", ")}`)),h.missingChecksumFiles.length&&console.log(s.gray(`   Missing checksums: ${h.missingChecksumFiles.join(", ")}`));}(h.status==="failed"||h.status==="warning"&&n.strict)&&process.exit(1);}catch(h){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,error:{code:`workspace.archive.${e}.failed`,message:h.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive ${e} failed: ${h.message}`)),process.exit(1);}}else if(t==="connect"){let d=P.resolve(e||process.cwd());try{let m=await ps({workspacePath:d,dryRun:n.dryRun===true||i("--dry-run"),projectGrounding:n.projectGrounding});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(s.green(m.status==="preview"?`\u2714 Workspace connection preview: ${d}`:`\u2714 Workspace connected: ${d}`));for(let w of m.warnings)console.log(s.yellow(`   \u26A0 ${w}`));}catch(m){let w=m instanceof Error?m.message:String(m);n.json?console.log(JSON.stringify(c$1({operation:"workspace connect",code:"workspace.connect.failed",message:w}),null,2)):console.log(s.red(`\u274C Workspace connect failed: ${w}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let d=e;d||(n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.input-required",message:"workspace import requires an archive path or URL."}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.hydrate.input-required",message:"workspace hydrate requires an archive path or URL."}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));try{if(t==="import"){let m=await ds({archivePathOrUrl:d,outputPath:l(),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),projectGrounding:n.projectGrounding,safety:b()});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(s.green(m.status==="preview"?`\u2714 Workspace import preview: ${m.workspacePath}`:`\u2714 Workspace imported and registered: ${m.workspacePath}`));for(let w of m.warnings)console.log(s.yellow(`   \u26A0 ${w}`));}else {let{hydrateWorkspaceArchive:m}=await import('./workspace-archive-3AURTMYA.js'),w=await m({archivePathOrUrl:d,outputPath:l(),force:n.force===true||i("--force"),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),safety:b()});if(n.json){console.log(JSON.stringify(w,null,2));return}console.log(s.green(w.dryRun?`\u2714 Workspace archive hydrate preview: ${w.outputPath}`:`\u2714 Workspace archive hydrated: ${w.outputPath}`)),console.log(s.gray(`   Files: ${w.files.length}`)),w.manifest?.workspaceName&&console.log(s.gray(`   Workspace: ${w.manifest.workspaceName}`));}}catch(m){let w=m instanceof Error?m.message:String(m);n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.failed",message:w,context:{archivePathOrUrl:d,...l()?{outputPath:l()}:{}}}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,...l()?{outputPath:l()}:{},dryRun:n.dryRun===true||i("--dry-run"),error:{code:`workspace.${t}.failed`,message:w}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace ${t} failed: ${w}`)),process.exit(1);}}else if(t==="run"){let d=a(`run ${e||""}`.trim()),m=new Set(["init","test","build","start"]),w=e?.trim()??"";w||(console.log(s.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(s.gray("  \u2022 init   \u2014 run install/bootstrap across the project fleet")),console.log(s.gray("  \u2022 test   \u2014 run test suite across selected projects")),console.log(s.gray("  \u2022 build  \u2014 compile/package across selected projects")),console.log(s.gray("  \u2022 start  \u2014 start services (smoke/e2e scenarios)")),console.log(s.gray("  \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(s.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),m.has(w)||(!/^[a-z][a-z0-9_-]*$/i.test(w)||w==="dev"||w==="stop")&&(console.log(s.red(`Unknown workspace run stage: ${w}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),w==="dev"&&console.log(s.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2));let y=Ps({raw:n.maxWorkers,operation:`workspace run ${w}`,json:n.json===true||i("--json")});if(w==="init"&&n.json!==true){let x=await _s(d);x!==0&&process.exit(x);}let{runWorkspaceStage:h}=await import('./workspace-run-NVQGRZYO.js'),v=await h({workspacePath:d,stage:w,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:y,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true,planOnly:n.plan===true,runtime:n.runtime});n.json&&console.log(JSON.stringify(v,null,2)),v.summary.exitCode!==0&&process.exit(v.summary.exitCode);}else if(t==="explain"||t==="why"){let d=a(t),{parseWorkspaceExplainTarget:m}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:w,writeWorkspaceExplainReport:y}=await import('./workspace-explain-HLEBUK4K.js'),h=(e??r??"").trim();!h&&n.scope&&(h=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),h||(h="release-blocked");let v=m(h);v||(console.log(s.red(`\u274C Invalid explain target: ${h}`)),process.exit(1));let x=await w({workspacePath:d,target:v}),R=n.write===true||i("--write"),C;if(R&&(C=await y(x,d,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$5(`workspace ${t}`,x,C),null,2));return}console.log(s.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${x.summary}`));for(let $ of x.sections)console.log(s.bold(`
-${$.title}`)),console.log($.body);C&&console.log(s.gray(`
-Written: ${C}`));}else if(t==="trace"){let d=a("trace"),m=n.from||e;m||(console.log(s.red("\u274C workspace trace requires --from <diff-ref>")),console.log(s.gray("   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:w}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:y,writeWorkspaceExplainReport:h}=await import('./workspace-explain-HLEBUK4K.js'),v=w(m);(!v||v.kind!=="trace")&&(console.log(s.red(`\u274C Invalid trace ref: ${m}`)),console.log(s.gray("   Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let x=await y({workspacePath:d,target:v}),R=n.write===true||i("--write"),C;if(R&&(C=await h(x,d,"trace")),n.json){console.log(JSON.stringify(b$5("workspace trace",x,C),null,2));return}console.log(s.green(`\u2714 Workspace trace: ${x.summary}`));for(let $ of x.sections)console.log(s.bold(`
-${$.title}`)),console.log($.body);C&&console.log(s.gray(`
-Written: ${C}`));}else if(t==="eval"){let d=a("eval"),m=(e||"status").toLowerCase(),{WORKSPACE_EVALUATION_LAST_RUN_PATH:w,WORKSPACE_EVALUATION_LIVE_PATH:y,appendWorkspaceEvaluationEvent:h,compareWorkspaceEvaluations:v,createWorkspaceEvaluation:x,finalizeWorkspaceEvaluation:R,readWorkspaceEvaluation:C,writeWorkspaceEvaluation:$}=await import('./workspace-intelligence-evaluation-4AB4BBRP.js');if(m==="init"){let j=(r||"").trim(),_=(o||"workspace-intelligence").trim(),N=["full-corpus","grep","vector","graph","workspace-intelligence","custom"];(!j||!N.includes(_))&&(console.log(s.red("\u274C workspace eval init requires <task> and an optional valid strategy.")),console.log(s.gray(`   Strategies: ${N.join(" | ")}
-   npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:V}=await import('./workspace-marker-7U3NYRPJ.js'),L=await V(d),q=x({workspacePath:d,workspaceName:L?.name,taskId:j,strategy:_}),H=await $(d,q);if(n.json){console.log(JSON.stringify(b$5("workspace eval init",q,H),null,2));return}console.log(s.green(`\u2714 Evaluation started: ${j}`)),console.log(s.gray(`   Run: ${q.runId}`)),console.log(s.gray(`   Strategy: ${q.configuration.strategy}`)),console.log(s.gray(`   Live: ${H}`));return}if(m==="record"){!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:j,readStdinAll:_}=await import('./workspace-feedback-FF34CSJE.js'),N=j(await _());N||(console.log(s.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let V=await h({workspacePath:d,payload:N});console.log(JSON.stringify(V,null,2));}catch(V){console.log(JSON.stringify(c$1({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:V instanceof Error?V.message:String(V),context:{workspacePath:d}}),null,2)),process.exit(1);}return}if(m==="report"){let j=await R({workspacePath:d}),_=l(),N=j.outputPath;if(_){let V=P.resolve(d,_);P.resolve(j.outputPath)!==V&&await M__default.copy(j.outputPath,V,{overwrite:true}),N=V;}if(n.json){console.log(JSON.stringify(b$5("workspace eval report",j.report,N),null,2));return}console.log(s.green(`\u2714 Evaluation finalized: ${j.report.runId}`)),console.log(s.gray(`   Tokens: ${j.report.summary.tokens.observedTotal} \xB7 model calls ${j.report.summary.modelCalls} \xB7 tool calls ${j.report.summary.toolCalls}`)),console.log(s.gray(`   Outcome: ${j.report.summary.outcome.status}${j.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(s.gray(`   Written: ${N}`));return}if(m==="compare"){let j=(n.from||r||"").trim();j||(console.log(s.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let _=await C(d,w),N=await C(d,j),V=v(_,N);if(n.json){console.log(JSON.stringify(V,null,2));return}console.log(s.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(s.gray(`   Task aligned: ${V.taskAligned?"yes":"no"}`)),console.log(s.gray(`   Token delta: ${V.delta.tokens}`)),console.log(s.gray(`   Reduction: ${V.delta.reductionPercent===null?"unavailable":`${V.delta.reductionPercent}%`}`)),console.log(s.gray(`   Comparable verified outcome: ${V.comparableOutcome?"yes":"no"}`));return}if(m==="status"){let j;try{j=await C(d,y);}catch{j=await C(d,w);}if(n.json){console.log(JSON.stringify(j,null,2));return}console.log(s.green(`\u2714 Evaluation ${j.status}: ${j.configuration.taskId}`)),console.log(s.gray(`   Run: ${j.runId}`)),console.log(s.gray(`   Events: ${j.events.length}`)),console.log(s.gray(`   Tokens: ${j.summary.tokens.observedTotal} (${j.summary.tokenSources.providerReported} provider-reported calls, ${j.summary.tokenSources.estimated} estimated calls)`));return}console.log(s.red(`Unknown eval action: ${m}`)),console.log(s.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let d=a("feedback"),m=(e||"record").toLowerCase();m!=="record"&&(console.log(s.red(`Unknown feedback action: ${m}`)),console.log(s.gray("Available: record")),process.exit(1)),!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:w,parseFeedbackStdinPayload:y,readStdinAll:h}=await import('./workspace-feedback-FF34CSJE.js'),v=await h(),x=y(v);x||(console.log(s.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let R=await w({workspacePath:d,payload:x});n.json?console.log(JSON.stringify(R,null,2)):R.ok?(console.log(s.green("\u2714 Workspace feedback recorded")),console.log(s.gray(`   History: ${R.historyPath}`))):console.log(s.red(`\u274C ${R.error??"Failed to record feedback"}`)),R.ok||process.exit(1);}else if(t==="goal"){let d=a("goal"),m=(e||"status").toLowerCase(),w=r?.trim(),{planVerifiedGoal:y,readVerifiedGoal:h,verifyVerifiedGoal:v,VERIFIED_GOAL_SCHEMA_VERSION:x}=await import('./verified-goal-A6WOMNTU.js'),R=C=>{if(n.json){console.log(JSON.stringify(C,null,2));return}let $=C.goal;console.log(C.status.state==="verified"?s.green("\u2714 Verified goal satisfied"):s.cyan(C.resumed?"\u21BB Verified goal resumed":"\u25C6 Verified goal ready")),$&&console.log(s.bold(`   ${$.summary}`)),console.log(s.gray(`   Goal: ${C.status.goalId}`)),console.log(s.gray(`   Progress: ${C.status.progress.message}`)),console.log(s.gray(`   State: ${C.status.state}`)),C.status.blockingReasons.length>0&&console.log(s.gray(`   Remaining: ${C.status.blockingReasons[0]}`)),C.status.nextActions.length>0&&console.log(s.gray(`   Next: ${C.status.nextActions[0]}`)),console.log(s.gray(`   Status: ${C.status.artifactPath}`));};if(m==="plan"){if(!w||!["release-readiness","dependency-security","test-coverage"].includes(w)){let V="Goal kind must be release-readiness, dependency-security, or test-coverage.";n.json?console.log(JSON.stringify(c$1({operation:"workspace goal plan",code:"workspace.goal.kind.invalid",message:V}),null,2)):console.log(s.red(`\u274C ${V}`)),process.exit(1);}let $=Number(n.target??80);if(!Number.isFinite($)||$<0||$>100)throw new Error("--target must be a number from 0 to 100.");let j=["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"],_=n.runtime;if(w==="test-coverage"&&_!==void 0&&!j.includes(_))throw new Error(`--runtime must be one of: ${j.join(", ")}.`);let N=await y({workspacePath:d,kind:w,scope:n.scope,target:$,runtime:w==="test-coverage"?_:void 0,allowBreakingChanges:n.allowBreaking===true,allowForce:n.allowForce===true,requireBuild:n.build!==false,requireTests:n.tests!==false});R(N);}else if(m==="status"){if(!w)throw new Error("workspace goal status requires a goal id.");let C=await h(d,w);R({...C,resumed:C.status.state!=="verified"});}else if(m==="verify"){if(!w)throw new Error("workspace goal verify requires a goal id.");let C=await h(d,w),$=await v({workspacePath:d,goalId:w,run:n.run!==false,runIntelligence:n.reuseIntelligence!==true});R({goal:C.goal,status:$}),$.state!=="verified"&&process.exit(2);}else {let C=`Unknown workspace goal action: ${m}`;n.json?console.log(JSON.stringify(c$1({operation:"workspace goal",code:"workspace.goal.action.invalid",message:C,context:{schemaVersion:x,availableActions:["plan","status","verify"]}}),null,2)):console.log(s.red(`\u274C ${C}`)),process.exit(1);}}else if(t==="mcp"){let d=a("mcp"),m=(e||"serve").toLowerCase();m!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:m,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${m}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(s.red(`Unknown mcp action: ${m}`)),console.log(s.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:w}=await import('./workspace-mcp-serve-JYUKX3YS.js');n.json||console.error(s.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await w({workspacePath:d});}else if(t==="init"){n.json||(console.log(s.yellow("\u2139  workspace init is an alias of: npx workspai workspace run init")),console.log(s.gray(`   Equivalent full-init aliases at workspace root:
+See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,r,o){let n=this.opts(),a=d=>{let m=n.workspace?b.resolve(n.workspace):null,w=null,k=null;try{w=b$5({startPath:process.cwd(),explicitWorkspacePath:m,strict:true})?.workspacePath??null;}catch(I){if(I instanceof a$2)k=I;else throw I}if(!w||!Qe(w)){let I=k?.message??"Not inside a Workspai workspace. Run from a workspace/project directory or pass --workspace <path>.";(n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${d}`,code:k?.code??"workspace.root.required",message:I,context:{cwd:b.resolve(process.cwd()),...m?{requestedWorkspace:m}:{},...k?.context??{}}}),null,2)),process.exit(1)),console.log(s.red(`\u274C ${I}`)),console.log(s.gray("\u{1F4A1} Run from a workspace/project directory, or pass --workspace <path> to resolve ambiguity.")),process.exit(1);}let h=b.resolve(process.cwd()),v=b.resolve(w);return h!==v&&!n.json&&console.log(s.gray(`\u2139 Using workspace root ${w} for "${d}" (current directory: ${h}).`)),w},i=d=>process.argv.includes(d),c=d=>_e(process.argv,d),l=()=>n.output||c("--output"),p$1=()=>{if(!n.scanDepth)return;let d=Number.parseInt(n.scanDepth,10);return Number.isFinite(d)?d:void 0},f=(d,m,w)=>{if(d===void 0)return;let k=Number.parseInt(d,10);if(!Number.isFinite(k)||k<1||k>w)throw new Error(`${m} must be an integer between 1 and ${w}.`);return k},u=()=>({...n.graphInventoryLimit!==void 0?{inventoryFileLimitPerProject:f(n.graphInventoryLimit,"--graph-inventory-limit",2e6)}:{},...n.graphSemanticBudget!==void 0?{semanticFilesPerProject:f(n.graphSemanticBudget,"--graph-semantic-budget",25e4)}:{},...n.graphDeepBudget!==void 0?{maxFilesPerProject:f(n.graphDeepBudget,"--graph-deep-budget",1e5)}:{},...n.graphSourceBudget!==void 0?{sourceFilesPerProject:f(n.graphSourceBudget,"--graph-source-budget",5e4)}:{}}),g=(d,m)=>{if(!d)return;let w=d.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!w)throw new Error(`${m} must be a byte size such as 500gb or 2tb.`);let k={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},h=Number(w[1])*k[w[2]||"b"];if(!Number.isSafeInteger(Math.floor(h))||h<=0)throw new Error(`${m} is outside the supported numeric range.`);return Math.floor(h)},j=()=>{let d=n.downloadTimeoutMs,m=d===void 0?void 0:Number.parseInt(d,10);if(m!==void 0&&(!Number.isFinite(m)||m<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:g(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:g(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:m,allowPrivateNetwork:n.allowPrivateNetwork===true||i("--allow-private-network")}},y=new Set(Object.values(co).flatMap(d=>[...d.flags])),S=new Set(process.argv.slice(2).filter(d=>d.startsWith("--")).map(d=>d.split("=",1)[0]).filter(d=>y.has(d))),E=co[t]?.flags,R=E?[...S].filter(d=>!E.includes(d)):[];if(R.length>0){let d=`${R.join(", ")} ${R.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||S.has("--json")?console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:d,exitCode:2,context:{action:t,unsupportedFlags:R,allowedFlags:E}}),null,2)):(console.log(s.red(`\u274C ${d}`)),console.log(s.gray(`   Allowed flags: ${E.join(", ")||"none"}`))),process.exit(2);}if((nd(t)||t==="trace"||t==="feedback"||t==="mcp")&&c$2({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||i("--json"),strict:n.strict===true||i("--strict")}}),t==="list"){let{listWorkspaces:d}=await import('./workspace-CBQDOUSH.js');await d({json:n.json===true||i("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(s.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(s.gray("   npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let d=a("intelligence"),{runWorkspaceIntelligenceChain:m}=await import('./workspace-intelligence-runner-BNZUYUUN.js'),w=await m({workspacePath:d,strict:n.strict===true||i("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||i("--json"))console.log(JSON.stringify(w,null,2));else {console.log(s.green(`\u2714 Workspace Intelligence: ${w.status}`));for(let k of w.stages)console.log(s.gray(`   ${k.id}: ${k.status} \u2014 ${k.message}`));console.log(s.gray(`   Evidence: ${w.artifactPath}`));}w.exitCode!==0&&process.exit(w.exitCode);}else if(t==="model"){let d=a("model"),{buildWorkspaceModelCached:m,buildWorkspaceModelIncremental:w,createWorkspaceModelBuildProvenance:k,writeWorkspaceModel:h}=await import('./workspace-model-6TKZMNEF.js'),v=n.incremental===true||i("--incremental"),I=n.cache===true||i("--cache")||v,x={workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1(),strict:n.strict===true||i("--strict")},P,A;if(v){let N=await w(x);P=N.model,A=N.mode;}else {let N=await m({...x,cache:I});P=N.model,A=N.cache;}P={...P,build:k({mode:v?"incremental":I?"cache":"full",engineStatus:A})};let C;(n.write===true||i("--write"))&&(C=await h(P,d));let _=(n.strict===true||i("--strict"))&&P.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...P,...C?{outputPath:C}:{}},null,2)),_&&process.exit(1);return}console.log(s.green(`\u2714 Workspace model: ${P.workspace.name}`)),v?console.log(s.gray(`   Build: ${A} (incremental)`)):I&&console.log(s.gray(`   Cache: ${A}`)),console.log(s.gray(`   Projects: ${P.summary.projectCount}`)),console.log(s.gray(`   Runtimes: ${P.summary.runtimes.join(", ")||"none"}`)),console.log(s.gray(`   Frameworks: ${P.summary.frameworks.join(", ")||"none"}`)),console.log(s.gray(`   Workspace type: ${P.identity.workspaceType}`)),console.log(s.gray(`   Validation: ${P.validation?.status??"unknown"} (${P.validation?.errors??0} error, ${P.validation?.warnings??0} warning)`)),console.log(C?s.gray(`   Written: ${C}`):s.gray("   Add --write to persist .workspai/reports/workspace-model.json")),_&&process.exit(1);}else if(t==="agent-sync"){let d=a("agent-sync"),{syncWorkspaceAgentGrounding:m,parseAgentGroundingTargets:w}=await import('./workspace-agent-sync-RTOTO3DY.js'),k=n.strict===true||i("--strict"),h=n.write===true||i("--write"),v=i("--dry-run"),I=await m({workspacePath:d,scope:n.scope,agent:n.forAgent,write:h&&!v,dryRun:v,strict:k,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||i("--refresh-context")||i("--refresh"),targets:w(n.target),experimentalHooks:n.experimentalHooks===true||i("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||i("--hydrate-prompts"),projectGrounding:n.projectGrounding??"managed",staleAfterHours:24});if(n.json)console.log(JSON.stringify(I,null,2));else {console.log(s.green(`\u2714 Agent grounding ${h&&!v?"synced":"planned"}`)),console.log(s.gray(`   Index: ${I.indexPath}`)),I.contextPath&&console.log(s.gray(`   Context: ${I.contextPath}`)),I.blockers.length>0&&console.log(s.yellow(`   Blockers: ${I.blockers.slice(0,3).join(" \xB7 ")}`));let x=h&&!v?I.writtenFiles:I.skippedFiles;if(x.length>0&&console.log(s.gray(`   Files: ${x.join(", ")}`)),I.strictViolations.length>0)for(let P of I.strictViolations)console.log(s.red(`\u274C ${P}`));}k&&I.strictViolations.length>0&&process.exit(1);}else if(t==="repair"){let d=e??"status",{approveWorkspaceRepair:m,cancelWorkspaceRepair:w,decideWorkspaceRepair:k,executeWorkspaceRepair:h,inspectWorkspaceRepairCapabilities:v,listWorkspaceRepairTransactions:I,planWorkspaceRepair:x,planWorkspaceRepairProposal:P,readWorkspaceRepairTransaction:A,rollbackWorkspaceRepair:C}=await import('./workspace-repair-engine-2VGFB3DJ.js');if(d==="capabilities"){let J,ae;if(n.workspace)J=a("repair capabilities");else try{let se=b$5({startPath:process.cwd(),strict:false});se&&Qe(se.workspacePath)&&(J=se.workspacePath,ae=se.projectPath??void 0);}catch{}let pe=await v(J?{workspacePath:J,project:n.project,projectPath:n.project?void 0:ae}:n.project?{project:n.project}:{});if(n.json===true||i("--json"))console.log(JSON.stringify(pe,null,2));else {console.log(s.green(`\u2714 Workspace repair adapters: ${pe.adapters.length}`));for(let se of pe.adapters)console.log(s.gray(`   ${se.id.padEnd(14)} ${se.support.padEnd(11)} ${se.ecosystem}`));console.log(s.gray("   Missing tools and unsupported ecosystems fail closed."));}return}let _=a("repair"),N=n.transaction??(["plan","propose","capabilities"].includes(d)?void 0:r),V=()=>{if(!N?.trim())throw new Error(`workspace repair ${d} requires --transaction <id> (or the id as the next positional argument).`);return N.trim()},D;if(d==="plan"){let J=n.card??r;if(!J?.trim())throw new Error("workspace repair plan requires --card <id>.");D=await x({workspacePath:_,cardId:J.trim(),actionId:n.actionId,projectName:n.project,maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(d==="propose"){let J=n.proposal??r;if(!J?.trim())throw new Error("workspace repair propose requires --proposal <path>.");let ae=b.resolve(_,J.trim()),pe=b.relative(_,ae);if(pe.startsWith("..")||b.isAbsolute(pe))throw new Error("The repair proposal file must be inside the canonical workspace.");let se=await M__default.lstat(ae).catch(()=>{});if(!se?.isFile()||se.isSymbolicLink()||se.size>25*1024*1024)throw new Error("The repair proposal must be a regular JSON file no larger than 25 MiB.");D=await P({workspacePath:_,proposal:await M__default.readJson(ae),maxRisk:n.maxRisk,allowBreaking:n.allowBreaking===true,allowForce:n.allowForce===true,autoRollback:n.autoRollback!==false});}else if(d==="approve")D=await m({workspacePath:_,transactionId:V(),approvedBy:n.approvedBy});else if(d==="decide"){if(!n.decision)throw new Error("workspace repair decide requires --decision <choice>.");D=await k({workspacePath:_,transactionId:V(),decision:n.decision});}else if(d==="execute"||d==="resume")D=await h({workspacePath:_,transactionId:V()});else if(d==="status")D=await A({workspacePath:_,transactionId:V()});else if(d==="list")D=await I(_);else if(d==="rollback")D=await C({workspacePath:_,transactionId:V()});else if(d==="cancel")D=await w({workspacePath:_,transactionId:V()});else throw new Error(`Unknown workspace repair action: ${d}. Available: capabilities, plan, propose, approve, decide, execute, resume, status, list, rollback, cancel.`);let q=b.join(_,p.repairTransaction);if(n.json===true||i("--json"))console.log(JSON.stringify(b$6(`workspace repair ${d}`,D,q),null,2));else if(Array.isArray(D)){console.log(s.green(`\u2714 Workspace repair transactions: ${D.length}`));for(let J of D.slice(0,20))console.log(s.gray(`   ${J.transactionId} \xB7 ${J.target.cardId} \xB7 ${J.state}`));}else {console.log(s.green(`\u2714 Workspace repair: ${D.state}`)),console.log(s.gray(`   Transaction: ${D.transactionId}`)),console.log(s.gray(`   Target: ${D.target.cardId}`));for(let J of D.stages)console.log(s.gray(`   ${J.status.padEnd(8)} ${J.kind}: ${J.summary}`));D.decision&&console.log(s.yellow(`   Decision: ${D.decision.reason}`)),console.log(s.gray(`   Evidence: ${p.repairTransaction}`));}Array.isArray(D)||(D.state==="decision-required"&&process.exit(2),(D.state==="rolled-back"||D.state==="failed")&&process.exit(1));return}else if(t==="remediation-plan"){let d=a("remediation-plan"),{buildArtifactRemediationPlan:m,writeArtifactRemediationPlan:w}=await import('./artifact-remediation-plan-HD5K52UJ.js'),k=await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),ciMode:n.ci===true||i("--ci")}),h;if((n.write===true||i("--write"))&&(h=await w(k,d)),n.json===true||i("--json")){console.log(JSON.stringify(b$6("workspace remediation-plan",k,h),null,2));return}console.log(s.green(`\u2714 Artifact remediation plan: ${k.workspace.name}`)),console.log(s.gray(`   Artifacts scanned: ${k.summary.artifactsScanned}`)),console.log(s.gray(`   Cards covered: ${k.summary.cardsCovered}`)),console.log(s.gray(`   CI mode: ${k.source.ciMode?"yes":"no"}`)),console.log(s.gray(`   Actions: ${k.summary.totalActions}`)),console.log(s.gray(`   Risk: safe=${k.summary.risk.safe}, guarded=${k.summary.risk.guarded}, invasive=${k.summary.risk.invasive}`));for(let v of k.actions.slice(0,8))console.log(s.gray(`   \u2022 ${v.cardId}: ${v.title} (${v.mode}, ${v.risk})`));k.actions.length>8&&console.log(s.gray(`   \u2026 ${k.actions.length-8} more action(s)`)),console.log(h?s.gray(`   Written: ${h}`):s.gray("   Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let d=a("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(s.red("\u274C workspace context currently requires --for-agent")),console.log(s.gray("   npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:m,writeWorkspaceAgentContext:w}=await import('./workspace-context-STRZO2N3.js'),k=n.strict===true||i("--strict"),h=await m({workspacePath:d,agent:n.forAgent||r||e,scope:n.scope,includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1(),strict:false}),v,I;if((n.write===true||i("--write"))&&(v=await w(h,d),(n.agentSync===true||i("--agent-sync")||n.noAgentSync!==true)&&!i("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:A,parseAgentGroundingTargets:C}=await import('./workspace-agent-sync-RTOTO3DY.js');if(I=await A({workspacePath:d,scope:n.scope,agent:h.agent,write:true,refreshContext:false,strict:k,preset:n.preset==="minimal"?"minimal":"enterprise",targets:C(n.target),projectGrounding:n.projectGrounding??"managed"}),n.json||console.log(s.gray(`   Agent grounding synced: ${I.writtenFiles.length} file(s) updated`)),k&&I.strictViolations.length>0){for(let _ of I.strictViolations)console.log(s.red(`\u274C ${_}`));process.exit(1);}}let x=k&&h.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...h,...v?{outputPath:v}:{},...I?{agentGroundingSync:I}:{}},null,2)),x&&process.exit(1);return}if(console.log(s.green(`\u2714 Workspace context: ${h.workspace.name}`)),console.log(s.gray(`   Agent: ${h.agent}`)),console.log(s.gray(`   Scope: ${h.scope.activeProject??h.scope.requested}`)),console.log(s.gray(`   Projects included: ${h.projects.length}`)),console.log(s.gray(`   Safe commands: ${h.safeCommands.length}`)),console.log(s.gray(`   Validation: ${h.validation.status} (${h.validation.errors} error, ${h.validation.warnings} warning)`)),console.log(v?s.gray(`   Written: ${v}`):s.gray("   Add --write to persist .workspai/reports/workspace-context-agent.json")),x){for(let P of h.validation.issues)console.log(s.red(`\u274C ${P.severity}:${P.code}:${P.target}`));process.exit(1);}}else if(t==="snapshot"){let d=a("snapshot"),{buildWorkspaceModelSnapshot:m,writeWorkspaceModelSnapshot:w}=await import('./workspace-intelligence-3RPZRWSF.js'),k=await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),h=await w(k,d);if(n.json){console.log(JSON.stringify(b$6("workspace snapshot",k,h),null,2));return}console.log(s.green(`\u2714 Workspace model snapshot: ${k.model.workspace.name}`)),console.log(s.gray(`   Hash: ${k.modelHash}`)),console.log(s.gray(`   Projects: ${k.model.summary.projectCount}`)),console.log(s.gray(`   Workspace type: ${k.model.identity.workspaceType}`)),console.log(s.gray(`   Written: ${h}`));}else if(t==="diff"){let d=a("diff"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(s.gray("   npx workspai workspace diff --from git --json  (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:w,writeWorkspaceModelDiff:k}=await import('./workspace-intelligence-3RPZRWSF.js'),h;try{h=await w({workspacePath:d,fromPath:m,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()});}catch(x){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:x.message,context:{workspacePath:d,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),x}let v=await k(h,d);if(n.json){console.log(JSON.stringify(b$6("workspace diff",h,v),null,2));return}let I=h.summary.changed?s.yellow:s.green;console.log(I(`\u2714 Workspace model diff: ${h.summary.changed?"changed":"clean"}`)),console.log(s.gray(`   From: ${h.fromRef}`)),console.log(s.gray(`   Added projects: ${h.summary.addedProjects}`)),console.log(s.gray(`   Removed projects: ${h.summary.removedProjects}`)),console.log(s.gray(`   Changed projects: ${h.summary.changedProjects}`)),console.log(s.gray(`   Workspace changes: ${h.summary.workspaceChanges}`)),console.log(s.gray(`   Validation changes: ${h.summary.validationChanges}`)),h.git?.available&&console.log(s.gray(`   Git: ${h.git.dirty?"dirty":"clean"} (${h.summary.gitChangedFiles} mapped change(s))`));for(let x of h.changes.slice(0,12))console.log(s.gray(`   \u2022 ${x.type} ${x.target}: ${x.message}`));h.changes.length>12&&console.log(s.gray(`   \u2026 ${h.changes.length-12} more change(s)`)),console.log(s.gray(`   Written: ${v}`));}else if(t==="impact"){let d=a("impact"),m=n.from||e;m||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:w,writeWorkspaceImpact:k}=await import('./workspace-intelligence-3RPZRWSF.js'),h;try{h=await w({workspacePath:d,fromPath:m,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()});}catch(x){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:x.message,context:{workspacePath:d,fromPath:m},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),x}let v=await k(h,d);if(n.json){console.log(JSON.stringify(b$6("workspace impact",h,v),null,2));return}let I=h.summary.risk==="critical"||h.summary.risk==="high"?s.red:h.summary.risk==="medium"?s.yellow:s.green;console.log(I(`\u2714 Workspace impact: ${h.summary.risk}`)),console.log(s.gray(`   From: ${h.fromRef}`)),console.log(s.gray(`   Affected projects: ${h.summary.affectedProjects}`)),console.log(s.gray(`   Workspace items: ${h.summary.workspaceItems}`)),console.log(s.gray(`   Recommended commands: ${h.summary.recommendedCommands}`));for(let x of h.affectedProjects.slice(0,8))console.log(s.gray(`   \u2022 ${x.title}: ${x.summary}`));h.affectedProjects.length>8&&console.log(s.gray(`   \u2026 ${h.affectedProjects.length-8} more project(s)`)),console.log(s.gray(`   Written: ${v}`));}else if(t==="verify"){let d=a("verify"),{buildWorkspaceVerify:m,writeWorkspaceVerify:w,evaluateWorkspaceVerifyGate:k}=await import('./workspace-verify-VQWYDAF2.js'),h=await m({workspacePath:d,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),v=await w(h,d),I=k(h,{strict:n.strict===true||i("--strict")}),x=I.exitCode,{recordWorkspaceHistory:P,historyEntryFromVerify:A}=await import('./workspace-history-EQG5UBKW.js');if(await P(d,A(h,I.passed)),n.json){console.log(JSON.stringify(b$6("workspace verify",{...h,gate:I},v,x),null,2)),x!==0&&process.exit(x);return}let C=h.summary.verdict==="ready"?s.green:h.summary.verdict==="needs-attention"?s.yellow:s.red;console.log(C(`\u2714 Workspace verify: ${h.summary.verdict}`)),console.log(s.gray(`   Freshness: ${h.freshness.verdict}`)),console.log(s.gray(`   Impact risk: ${h.impact.risk}`)),console.log(s.gray(`   Steps: ${h.steps.length}`)),console.log(s.gray(`   Passed ${h.summary.stepsPassed}, warn ${h.summary.stepsWarn}, failed ${h.summary.stepsFailed}, missing ${h.summary.stepsMissing}`));for(let _ of h.steps.slice(0,10))console.log(s.gray(`   \u2022 ${_.id}: ${_.status} \u2014 ${_.message}`));if(h.steps.length>10&&console.log(s.gray(`   \u2026 ${h.steps.length-10} more step(s)`)),h.policyViolations.length>0){console.log(s.gray(`   Policy (${h.policyMode}): ${h.policyViolations.length} violation(s)`));for(let _ of h.policyViolations.slice(0,5)){let N=_.severity==="error"?s.red("\u2717"):s.yellow("!");console.log(`   ${N} [${_.source}] ${_.code}: ${_.message}`);}}console.log(s.gray(`   Gate (${I.mode}): ${I.passed?"passed":"blocked"}`));for(let _ of I.reasons.slice(0,5))console.log(s.red(`   \u2717 ${_}`));console.log(s.gray(`   Written: ${v}`)),x!==0&&process.exit(x);}else if(t==="graph"){let d=a("graph"),{buildWorkspaceModel:m,workspaceModelProjectTopology:w}=await import('./workspace-model-6TKZMNEF.js'),{buildGraphEmit:k,renderGraphDot:h,renderGraphMermaid:v,explainGraphNode:I}=await import('./workspace-graph-2A5THUCI.js'),x=(e||"emit").toLowerCase(),P=["emit","dot","mermaid","jsonld","graphml","gexf","explain","entities","search","benchmark","benchmark-suite","evidence","path","overlay"];if(!P.includes(x)){let L=`Unknown workspace graph mode '${x}'.`;n.json?console.log(JSON.stringify(c$1({operation:`workspace graph ${x}`,code:"workspace.graph.mode.unsupported",message:L,exitCode:2,context:{mode:x,supportedModes:P},examples:["workspai workspace graph emit --json"]}),null,2)):(console.log(s.red(`\u274C ${L}`)),console.log(s.gray(`   Supported: ${P.join(", ")}`))),process.exit(2);}let A=new Set(["benchmark","benchmark-suite","entities","evidence","path","search"]),C=n.refreshGraph===true||i("--refresh-graph"),_=A.has(x)&&!C?await(await import('./workspace-knowledge-graph-snapshot-TQAKDDUA.js')).readWorkspaceKnowledgeGraphSnapshot(d):null,N=_?.status==="hit"?_.graph:null,V=_?.status==="hit"?_.model:await m({workspacePath:d,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p$1()}),D=w(V);D||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:x,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(s.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let q$1=async()=>{if(N)return N;let{buildWorkspaceKnowledgeGraph:L}=await import('./workspace-knowledge-graph-VJLD35ES.js'),{hashWorkspaceModel:G}=await import('./workspace-model-hash-ZXYPIGCW.js'),{readWorkspaceContract:oe}=await import('./workspace-contract-PMHUUKFM.js'),te=null;try{te=(await oe({workspacePath:d})).contract;}catch{}return L({...u(),workspacePath:d,workspace:{name:V.workspace.name,...V.workspace.profile?{profile:V.workspace.profile}:{}},projects:V.projects.map(z=>({id:z.name,path:z.path,...z.absolutePath?{absolutePath:z.absolutePath}:{},runtime:z.runtime,runtimeCandidates:z.runtimeCandidates,framework:z.framework,kind:z.kind,category:z.category,...z.governance?{governance:z.governance}:{},...z.kit?{kit:z.kit}:{}})),projectTopology:D,contract:te,now:new Date(V.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:G(V)}})};if(x==="dot"||x==="mermaid"){let L=x==="dot"?h(D):v(D),G=l();if(G){let oe=b.resolve(d,G);await M__default.outputFile(oe,`${L}
+`,"utf8"),n.json?console.log(JSON.stringify(b$6(`workspace graph ${x}`,{format:x,nodeCount:D.stats.nodeCount,edgeCount:D.stats.edgeCount},oe),null,2)):(console.log(s.green(`\u2714 Workspace dependency graph exported as ${x}`)),console.log(s.gray(`   Written: ${oe}`)));return}console.log(L);return}if(x==="jsonld"||x==="graphml"||x==="gexf"){let L=await q$1(),{renderWorkspaceKnowledgeGraphGexf:G,renderWorkspaceKnowledgeGraphGraphMl:oe,renderWorkspaceKnowledgeGraphJsonLd:te}=await import('./workspace-knowledge-graph-export-UYAYFTWX.js'),z=x==="jsonld"?te(L):x==="graphml"?oe(L):G(L),ee=l();if(ee){let Y=b.resolve(d,ee);await M__default.outputFile(Y,`${z}
+`,"utf8"),n.json?console.log(JSON.stringify(b$6(`workspace graph ${x}`,{format:x,entityCount:L.entities.length,relationCount:L.relations.length,proofCount:L.proofs.length},Y),null,2)):(console.log(s.green(`\u2714 Workspace knowledge graph exported as ${x}`)),console.log(s.gray(`   Written: ${Y}`)));return}console.log(z);return}if(x==="explain"){let L=(n.scope?.replace(/^project:/,"")||r||"").trim();L||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(s.red("\u274C workspace graph explain requires a project.")),console.log(s.gray("   npx workspai workspace graph explain <project> --json")),console.log(s.gray("   npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let G=I(D,L);if(n.json){console.log(JSON.stringify(G,null,2)),G.found||process.exit(1);return}G.found||(console.log(s.red(`\u274C Project not found in dependency graph: ${L}`)),process.exit(1)),console.log(s.green(`\u2714 Graph explain: ${G.project}`)),G.centrality&&console.log(s.gray(`   Centrality: fanIn ${G.centrality.fanIn}, fanOut ${G.centrality.fanOut}, reach ${G.centrality.reach}, betweenness ${G.centrality.betweenness}${G.centrality.isHotspot?" (hotspot)":""}`)),console.log(s.gray(`   Direct dependents: ${G.directDependents.join(", ")||"none"}`)),console.log(s.gray(`   Direct dependencies: ${G.directDependencies.join(", ")||"none"}`)),console.log(s.gray(`   Blast radius (transitive dependents): ${G.transitiveDependents.length}`));for(let oe of G.transitiveDependents.slice(0,10))console.log(s.gray(`   \u2022 ${oe.id} (d${oe.distance}, via ${oe.via??"\u2014"})`));return}if(x==="entities"){let L=await q$1(),{queryKnowledgeEntities:G}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),oe=(r||n.kind||"").trim()||void 0;if(oe){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:K}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');K.includes(oe)||(console.log(s.red(`\u274C Unknown graph entity kind: ${oe}`)),console.log(s.gray(`   Supported: ${K.join(", ")}`)),process.exit(1));}let te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=G(L,oe,te),ee=n.limit??c("--limit"),Y=ee===void 0?void 0:Number.parseInt(ee,10);Y!==void 0&&(!Number.isFinite(Y)||Y<1||Y>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let O=Y===void 0?z:z.slice(0,Y);if(n.json){console.log(JSON.stringify({schemaVersion:L.schemaVersion,generatedAt:L.generatedAt,kind:oe??null,...te?{projectId:te}:{},count:O.length,totalMatches:z.length,truncated:O.length<z.length,entities:O},null,2));return}console.log(s.green(`\u2714 Workspace graph entities${oe?`: ${oe}`:""}`)),console.log(s.gray(`   Count: ${O.length}/${z.length}${O.length<z.length?" (bounded)":""}`));for(let K of O)console.log(s.gray(`   \u2022 ${K.kind}: ${K.label} [${K.id}]`));return}if(x==="benchmark-suite"){let L=(r||"agent-core.v1").trim(),{WORKSPACE_INTELLIGENCE_BENCHMARK_REPORT_PATH:G,WORKSPACE_INTELLIGENCE_BENCHMARK_SUITES:oe,buildWorkspaceIntelligenceBenchmark:te,writeWorkspaceIntelligenceBenchmark:z}=await import('./workspace-intelligence-benchmark-R5MEGJQS.js');L in oe||(console.log(s.red(`\u274C Unknown benchmark suite: ${L}`)),console.log(s.gray(`   Supported: ${Object.keys(oe).join(", ")}`)),process.exit(2));let ee=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(ee)||ee<1||ee>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let Y=await q$1(),O=await te({workspacePath:d,graph:Y,suite:L,limit:ee,...n.from?{baselineEvaluationPath:n.from}:{}}),H=n.write===true||i("--write")||!!l()?await z(d,O,l()??G):void 0;if(n.json){console.log(JSON.stringify(b$6("workspace graph benchmark-suite",O,H),null,2));return}console.log(s.green(`\u2714 Workspace Intelligence benchmark: ${O.suite.title}`)),console.log(s.gray(`   Scenarios: ${O.retrievalSummary.matchedScenarioCount}/${O.retrievalSummary.scenarioCount} matched \xB7 ${O.retrievalSummary.status}`)),console.log(s.gray(`   Median estimated retrieval: ${O.retrievalSummary.medianRetrievalEstimatedTokens} tokens \xB7 p95 ${O.retrievalSummary.p95RetrievalEstimatedTokens}`)),console.log(s.gray(`   Median estimated payload reduction: ${O.retrievalSummary.medianEstimatedReductionPercent}%`)),console.log(s.gray(`   Model evaluation: ${O.evaluation.availability} (${O.evaluation.provenance})`)),console.log(s.yellow(`   ${O.methodology.claimBoundary}`)),H&&console.log(s.gray(`   Written: ${H}`));return}if(x==="search"||x==="benchmark"){let L=(r||"").trim();L||(console.log(s.red(`\u274C workspace graph ${x} requires a search query.`)),console.log(s.gray(`   npx workspai workspace graph ${x} "authentication endpoint" --json`)),process.exit(1));let G=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(G)||G<1||G>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let oe=await q$1();if(x==="benchmark"){let O=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,{buildWorkspaceGraphTokenEfficiencyReport:K}=await import('./workspace-graph-token-efficiency-YHXFGH3Z.js'),H=await K({workspacePath:d,graph:oe,query:L,limit:G,...O?{projectId:O}:{}});n.json?console.log(JSON.stringify(H,null,2)):(console.log(s.green(`\u2714 Graph retrieval benchmark: ${L}`)),console.log(s.gray(`   Estimated tokens: ${H.corpus.estimatedTokens} corpus \u2192 ${H.retrieval.estimatedTokens} bounded retrieval`)),console.log(s.gray(`   Estimated payload reduction: ${H.savings.reductionRatio}\xD7 (${H.savings.reductionPercent}%)`)),console.log(s.gray(`   Matches: ${H.retrieval.matchCount}`)),console.log(s.yellow(`   ${H.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:te}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=n.kind?String(n.kind).trim():void 0;if(ee){let{WORKSPACE_KNOWLEDGE_ENTITY_KINDS:O}=await import('./workspace-knowledge-graph-contract-FVX5T7SU.js');O.includes(ee)||(console.log(s.red(`\u274C Unknown graph entity kind: ${ee}`)),console.log(s.gray(`   Supported: ${O.join(", ")}`)),process.exit(1));}let Y=te(oe,{query:L,limit:G,...ee?{kind:ee}:{},...z?{projectId:z}:{},projection:"agent"});if(n.json)console.log(JSON.stringify(Y,null,2));else {console.log(s.green(`\u2714 Workspace graph search: ${L}`)),console.log(s.gray(`   ${Y.entities.length}/${Y.totalMatches} match(es)${Y.truncated?" (bounded)":""}`));for(let O of Y.entities)console.log(s.gray(`   \u2022 ${O.kind}: ${O.label} [${O.id}]`));}return}if(x==="evidence"){let L=(r||"").trim();L||(console.log(s.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let G=await q$1(),{queryKnowledgeEvidence:oe}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),te=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,z=oe(G,L,te);if(n.json)console.log(JSON.stringify(z,null,2));else if(z.found){console.log(s.green(`\u2714 Graph evidence: ${L}`));for(let ee of z.proofs)console.log(s.gray(`   \u2022 ${ee.artifact}${ee.pointer?`#${ee.pointer}`:""} [${ee.provider}/${ee.trust}/${ee.confidence}]`));}else {console.log(s.red(z.candidates.length>0?`\u274C Graph query is ambiguous: ${L}`:`\u274C Graph entity or relation not found: ${L}`));for(let ee of z.candidates.slice(0,10))console.log(s.gray(`   \u2022 ${ee}`));}z.found||process.exit(1);return}if(x==="path"){let L=(r||"").trim(),G=(o||"").trim();(!L||!G)&&(console.log(s.red("\u274C workspace graph path requires <from> and <to>.")),console.log(s.gray("   npx workspai workspace graph path <from> <to> --json")),process.exit(1));let oe=await q$1(),{queryKnowledgePath:te}=await import('./workspace-knowledge-graph-query-TT2KK3SF.js'),z=n.scope?.startsWith("project:")?n.scope.slice(8).trim():void 0,ee=te(oe,L,G,z);if(n.json)console.log(JSON.stringify(ee,null,2));else if(ee.found){console.log(s.green(`\u2714 Graph proof path: ${L} \u2192 ${G}`));for(let Y of ee.hops)console.log(s.gray(`   \u2022 ${Y.from} ${Y.direction==="forward"?"\u2192":"\u2190"} ${Y.to} [${Y.kind}]`));console.log(s.gray(`   Proofs: ${ee.proofs.length}`));}else console.log(s.red(`\u274C No graph path found between ${L} and ${G}.`));ee.found||process.exit(1);return}if(x==="overlay"){let L=(n.from||r||"").trim();L||(console.log(s.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(s.gray("   npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let G=b.resolve(d,L),oe;try{oe=JSON.parse(await M__default.readFile(G,"utf8"));}catch(Te){console.log(s.red(`\u274C Could not read the base knowledge graph: ${Te instanceof Error?Te.message:String(Te)}`)),process.exit(1);}let te=oe&&typeof oe=="object"?oe:{},z=te.graph,ee=z&&typeof z=="object"?z:{},Y=te.schemaVersion===q.knowledgeGraph?te:te.knowledgeGraph??ee.knowledgeGraph;(!Y||typeof Y!="object"||Y.schemaVersion!==q.knowledgeGraph)&&(console.log(s.red(`\u274C Base file does not contain a ${q.knowledgeGraph} document.`)),process.exit(1));let O=await q$1(),{buildWorkspaceKnowledgeGraphChangeOverlay:K}=await import('./workspace-knowledge-graph-change-overlay-FIIAFLO6.js'),H=K(Y,O);if(n.json){console.log(JSON.stringify(H,null,2));return}console.log(s.green("\u2714 Workspace graph change overlay")),console.log(s.gray(`   Base: ${L}`)),console.log(s.gray(`   Risk: ${H.summary.risk}`)),console.log(s.gray(`   Entities: +${H.summary.entityAdds} -${H.summary.entityRemovals} ~${H.summary.entityChanges}`)),console.log(s.gray(`   Relations: +${H.summary.relationAdds} -${H.summary.relationRemovals} ~${H.summary.relationChanges}`)),console.log(s.gray(`   Proofs: +${H.summary.proofAdds} -${H.summary.proofRemovals} ~${H.summary.proofChanges}`)),console.log(s.gray(`   Impacted: ${H.summary.impactedEntities} entities \xB7 ${H.summary.changedArtifacts} proof artifacts`));return}let J=k(D),{writeWorkspaceModel:ae}=await import('./workspace-model-6TKZMNEF.js');await ae(V,d,{refreshKnowledgeGraph:C});let pe=await M__default.readJson(b.join(d,p.knowledgeGraph)),se={...J,knowledgeGraph:pe},Ue=l();if(Ue){let L=b.resolve(d,Ue);await M__default.outputFile(L,`${JSON.stringify(se,null,2)}
+`,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace graph emit",{format:"json",nodeCount:D.stats.nodeCount,edgeCount:D.stats.edgeCount,entityCount:pe.entities.length,relationCount:pe.relations.length,proofCount:pe.proofs.length},L),null,2)):(console.log(s.green("\u2714 Workspace graph artifact exported as JSON")),console.log(s.gray(`   Written: ${L}`)));return}if(n.json){console.log(JSON.stringify(se,null,2));return}console.log(s.green("\u2714 Workspace dependency graph")),console.log(s.gray(`   Nodes: ${J.graph.stats.nodeCount}`)),console.log(s.gray(`   Edges: ${J.graph.stats.edgeCount} (inferred ${J.graph.stats.inferredEdges}, contract ${J.graph.stats.contractEdges}, manual ${J.graph.stats.manualEdges})`)),console.log(s.gray(`   Integrity: ${J.integrity.ok?"ok":"issues"} (cycles ${J.integrity.stats.cycleCount}, dangling ${J.integrity.stats.danglingCount}, orphans ${J.integrity.stats.orphanCount})`)),console.log(s.gray(`   Hotspots: ${J.hotspots.join(", ")||"none"}`)),console.log(s.gray(`   Knowledge: ${pe.quality.entityCount} entities \xB7 ${pe.quality.relationCount} relations \xB7 ${pe.quality.proofCount} proofs \xB7 ${pe.providers.length} providers`));let ze=(pe.source.inputs?.scopes??[]).filter(L=>L.truncated),be=pe.quality.completeness;if(ze.length>0?console.log(s.yellow(`   Inventory: emergency-bounded \u2014 ${ze.map(L=>`${L.kind}:${L.id} indexed ${L.fileCount}/${L.eligibleFileCountExact===false?"at-least-":""}${L.eligibleFileCount??L.fileCount} eligible files`).join(", ")}`)):console.log(s.gray(`   Inventory: complete \u2014 ${be?.inventory.indexedFiles??(pe.source.inputs?.scopes??[]).reduce((L,G)=>L+G.fileCount,0)} eligible files indexed across ${be?.inventory.scopeCount??(pe.source.inputs?.scopes??[]).length} scope(s)`)),be){let L=`${be.providers.complete} complete \xB7 ${be.providers.bounded} adaptive-bounded \xB7 ${be.providers.notApplicable} not-applicable \xB7 ${be.providers.failed} failed`;console.log(be.status==="complete"?s.gray(`   Provider coverage: ${L}`):s.yellow(`   Provider coverage: ${L}`));}console.log(s.gray("   Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(s.gray("   Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let d=a("watch"),{runWorkspaceWatch:m}=await import('./workspace-watch-2Z636HWS.js'),w=n.once===true||i("--once"),k=n.graphStream===true||i("--graph-stream"),h=n.json===true||k,v=k?new(await import('./workspace-graph-stream-Q55CI4K4.js')).WorkspaceGraphStreamPublisher({workspacePath:d}):null,I=new AbortController,x=()=>I.abort();process.once("SIGINT",x),process.once("SIGTERM",x),h||console.log(s.green("\u2714 Workspace watch (model + graph kept in memory)")),await m({workspacePath:d,once:w,signal:I.signal,buildOptions:{workspacePath:d,observableScanDepth:p$1()},onProgress:P=>{h||console.error(s.gray(`   ${P}`));},onModel:v?async P=>{let A=(await import('./workspace-model-6TKZMNEF.js')).workspaceModelProjectTopology(P);if(!A)return;let{buildWorkspaceKnowledgeGraph:C}=await import('./workspace-knowledge-graph-VJLD35ES.js'),{readWorkspaceContract:_}=await import('./workspace-contract-PMHUUKFM.js'),N=null;try{N=(await _({workspacePath:d})).contract;}catch{}let V=await C({...u(),workspacePath:d,workspace:{name:P.workspace.name,...P.workspace.profile?{profile:P.workspace.profile}:{}},projects:P.projects.map(D=>({id:D.name,path:D.path,...D.absolutePath?{absolutePath:D.absolutePath}:{},runtime:D.runtime,runtimeCandidates:D.runtimeCandidates,framework:D.framework,...D.kit?{kit:D.kit}:{}})),projectTopology:A,contract:N,now:new Date(P.generatedAt),source:{kind:"workspace-model",artifact:p.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-ZXYPIGCW.js')).hashWorkspaceModel(P)}});console.log(JSON.stringify(v.publish(P,V)));}:void 0,emit:P=>{if(k)return;if(h){console.log(JSON.stringify(P));return}if(P.kind==="ready"){console.log(s.gray(`   Ready: ${P.graph.nodeCount} nodes, ${P.graph.edgeCount} edges (hash ${P.modelHash.slice(0,12)})`));return}if(P.kind==="error"){console.error(s.red(`   \u2717 Rebuild failed: ${P.error??"unknown error"}`));return}if(P.kind==="unchanged"){console.log(s.gray(`   No structural change (${P.mode}, ${P.durationMs}ms)`));return}let A=[];P.changedProjects.length>0&&A.push(`changed: ${P.changedProjects.join(", ")}`),P.addedProjects.length>0&&A.push(`added: ${P.addedProjects.join(", ")}`),P.removedProjects.length>0&&A.push(`removed: ${P.removedProjects.join(", ")}`),P.graph.edgesAdded.length>0&&A.push(`+${P.graph.edgesAdded.length} edges`),P.graph.edgesRemoved.length>0&&A.push(`-${P.graph.edgesRemoved.length} edges`),console.log(s.cyan(`   \u21BB Changed (${P.mode}, ${P.durationMs}ms): ${A.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",x),process.removeListener("SIGTERM",x),!h&&!w&&console.log(s.gray("   Watch stopped."));return}else if(t==="sync"){let d=a("sync"),{syncWorkspaceProjects:m}=await import('./workspace-CBQDOUSH.js');n.json||console.log(s.cyan(`\u{1F4C2} Scanning workspace: ${b.basename(d)}`));let w=await m(d,n.json===true);await fo(d,{silent:n.json===true});let{syncWorkspaceProjectLenses:k}=await import('./project-intelligence-lens-JCHFOIA7.js'),h=await k({workspacePath:d,mode:n.projectGrounding??"managed"}),{readWorkspaceRegistrySummary:v}=await import('./workspace-registry-summary-ILVO7DEU.js'),I=await v(d);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:d,registry:w,contractSynced:true,projectLenses:{synced:h.projects.length,skipped:h.skipped},registrySummary:I},null,2));}else if(t==="registry"){let d=a("registry"),m=e||"status";m!=="status"&&(console.log(s.red(`\u274C Unknown workspace registry action: ${m}`)),console.log(s.gray("   npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:w,resolveWorkspaceRegisteredProjects:k}=await import('./workspace-registry-summary-ILVO7DEU.js'),h=await w(d);if(n.json){console.log(JSON.stringify(h,null,2));return}let v=await k(d);console.log(s.cyan("Workspace registry")),console.log(s.gray(`   Authority: ${h.authority}`)),console.log(s.gray(`   Projects: ${h.projectCount}`)),console.log(s.gray(`   Summary: ${h.registrySummaryPath}`)),v.summary.projectCount===0&&console.log(s.yellow("   No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let d=a("foundation"),m=e||"ensure";m!=="ensure"&&(console.log(s.red(`\u274C Unknown workspace foundation action: ${m}`)),console.log(s.gray("   npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:w}=await import('./workspace-foundation-OULCDCXG.js'),k=await w(d,{force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(k,null,2));return}k.created.length>0?console.log(s.green(`\u2714 Workspace foundation ensured: ${k.created.join(", ")}`)):console.log(s.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let d=a("policy"),m=await ah(d,e,r,o,n.json===true||i("--json"));m!==0&&process.exit(m);}else if(t==="contract"){let d=a("contract"),{buildWorkspaceContractGraph:m,readWorkspaceContract:w,syncWorkspaceContract:k,verifyWorkspaceContract:h,writeWorkspaceContract:v,WORKSPACE_CONTRACT_PATH:I}=await import('./workspace-contract-PMHUUKFM.js'),x=e||"inspect",P=l(),A=x==="graph"||x==="sync"?void 0:P;try{if(x==="init"){let C=await v({workspacePath:d,outputPath:A,force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(C,null,2));return}console.log(s.green(`\u2714 Workspace contract initialized: ${C.contractPath}`)),console.log(s.gray(`   Projects: ${C.contract.projects.length}`));return}if(x==="inspect"){let C=await w({workspacePath:d,contractPath:A});if(n.json){console.log(JSON.stringify(C,null,2));return}console.log(s.green(`\u2714 Workspace contract: ${C.contractPath}`)),console.log(s.gray(`   Workspace: ${C.contract.workspace.name}`)),console.log(s.gray(`   Projects: ${C.contract.projects.length}`)),console.log(s.gray(`   Schema: v${C.contract.schemaVersion}`));return}if(x==="sync"){let C=await k({workspacePath:d,strict:n.strict===true||i("--strict")});if(n.json){console.log(JSON.stringify(C,null,2));return}console.log(s.green(`\u2714 Workspace contract synchronized: ${C.contractPath}`)),console.log(s.gray(`   Projects: ${C.contract.projects.length}`)),console.log(s.gray(`   Added: ${C.addedProjects.join(", ")||"none"}`)),console.log(s.gray(`   Updated: ${C.updatedProjects.join(", ")||"none"}`));return}if(x==="verify"){let C=await h({workspacePath:d,contractPath:A,strict:n.strict===true||i("--strict")}),{writeWorkspaceContractVerifyEvidence:_}=await import('./workspace-contract-PMHUUKFM.js'),N=await _({workspacePath:d,result:C});if(n.json)console.log(JSON.stringify({...C,evidencePath:N},null,2));else {let V=C.status==="passed"?s.green:s.red;console.log(V(`\u2714 Workspace contract verification ${C.status}: ${C.contractPath}`)),console.log(s.gray(`   Projects: ${C.projectCount}`));for(let D of C.checks){let q=D.status==="passed"?"\u2714":"\u2718";console.log(s.gray(`   ${q} ${D.id}: ${D.message}`));}for(let D of C.violations)console.log(s.gray(`   Violation: ${D}`));}(C.status==="failed"||C.status!=="passed"&&n.strict)&&process.exit(1);return}if(x==="graph"){let C=await m({workspacePath:d,contractPath:A});if(P){let _=b.resolve(d,P);await M__default.outputFile(_,`${JSON.stringify(C,null,2)}
+`,"utf8"),n.json?console.log(JSON.stringify(b$6("workspace contract graph",{projectCount:C.graph.summary.projectCount,relationshipEdges:C.graph.summary.relationshipEdges,entityCount:C.graph.summary.entityCount,knowledgeRelations:C.graph.summary.knowledgeRelations,proofCount:C.graph.summary.proofCount},_),null,2)):(console.log(s.green("\u2714 Workspace contract graph exported as JSON")),console.log(s.gray(`   Written: ${_}`)));return}if(n.json){console.log(JSON.stringify(C,null,2));return}console.log(s.green(`\u2714 Workspace contract graph: ${C.contractPath}`)),console.log(s.gray(`   Workspace: ${C.graph.workspace.name}`)),console.log(s.gray(`   Projects: ${C.graph.summary.projectCount}`)),console.log(s.gray(`   Dependencies: ${C.graph.summary.dependencyEdges}`)),console.log(s.gray(`   Event links: ${C.graph.summary.eventEdges}`)),console.log(s.gray(`   Evidence-backed relationships: ${C.graph.summary.relationshipEdges} (${C.graph.summary.inferredEdges} inferred, ${C.graph.summary.authoritativeEdges} authoritative)`)),console.log(s.gray(`   Connected projects: ${C.graph.summary.connectedProjects}/${C.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(C.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(C.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(s.gray(`   Orphans: ${C.graph.summary.orphanProjects} \xB7 Hotspots: ${C.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${C.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${C.graph.summary.hasCycle?"yes":"no"}`)),console.log(s.gray(`   Knowledge: ${C.graph.summary.entityCount} entities \xB7 ${C.graph.summary.knowledgeRelations} relations \xB7 ${C.graph.summary.proofCount} proofs \xB7 ${C.graph.summary.providerCount} providers \xB7 ${C.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(s.gray(`   Ports: ${C.graph.summary.portCount}`));for(let _ of C.graph.nodes){let N=_.ports.map(D=>`${D.name}:${D.port}`).join(", ")||"none",V=_.operationalProfile?` risk=${_.operationalProfile.weight}/${_.operationalProfile.verificationPriority}`:"";console.log(s.gray(`   \u2022 ${_.id} (${_.runtime||"unknown"}${_.framework?`/${_.framework}`:""}) ports=${N} manifests=${_.files.manifests.length}${V}`));}for(let _ of C.graph.edges){let N=_.type==="event"?`event:${_.label}`:_.label;console.log(s.gray(`     ${_.from} -> ${_.to} [${N}]`));}if(C.graph.dependencyGraph.edges.length>0){console.log(s.gray("   Evidence-backed dependency direction (consumer -> dependency):"));for(let _ of C.graph.dependencyGraph.edges)console.log(s.gray(`     ${_.from} -> ${_.to} [${_.kind}/${_.source}/${_.confidence}] evidence=${_.evidence.length}`));}for(let _ of C.graph.dependencyGraph.diagnostics||[])console.log(s.gray(`   ${_.severity}: ${_.message}`));return}console.log(s.red(`\u274C Unknown workspace contract action: ${x}`)),console.log(s.white(`   npx workspai workspace contract init|inspect|sync|verify|graph [--output ${I}]`)),process.exit(1);}catch(C){n.json&&(console.log(JSON.stringify({command:`workspace contract ${x}`,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${x}.failed`,message:C.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace contract ${x} failed: ${C.message}`)),process.exit(1);}}else if(t==="share"){let d=a("share"),m=l()||e,{createWorkspaceShareBundle:w}=await import('./workspace-CBQDOUSH.js'),k=await w(d,{outputPath:m,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:d,bundlePath:k,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(s.green(`\u2714 Workspace share bundle exported: ${k}`)),console.log(s.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let d=a("export");try{let{exportWorkspaceArchive:m}=await import('./workspace-archive-3AURTMYA.js'),w=n.archiveCompression?.trim().toLowerCase()??"store";if(w!=="store"&&w!=="deflate")throw new Error("--archive-compression must be store or deflate.");let k=await m({workspacePath:d,outputPath:l()||e,includeEnv:n.includeEnv===true||i("--include-env"),compression:w});if(n.json){console.log(JSON.stringify(k,null,2));return}let h=(k.bytesWritten/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive exported: ${k.archivePath}`)),console.log(s.gray(`   Files: ${k.manifest.files.length}`)),console.log(s.gray(`   Size: ${h} MB`)),k.manifest.security.envFilesIncluded||console.log(s.gray("   Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(m){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:m.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive export failed: ${m.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let d=r;d||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:m,inspectWorkspaceArchive:w,verifyWorkspaceArchive:k}=await import('./workspace-archive-3AURTMYA.js');try{if(e==="inspect"){let v=await w({archivePathOrUrl:d,safety:j()});if(n.json){console.log(JSON.stringify(v,null,2));return}let I=(v.totalBytes/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive: ${v.archivePath}`)),console.log(s.gray(`   Workspace: ${v.manifest.workspaceName}`)),console.log(s.gray(`   Exported: ${v.manifest.exportedAt}`)),console.log(s.gray(`   Exporter: ${v.manifest.exportedBy||"unknown"}`)),console.log(s.gray(`   Files: ${v.fileCount}`)),console.log(s.gray(`   Payload: ${I} MB`));return}if(e==="doctor"){let v=await m({archivePathOrUrl:d,strict:n.strict===true||i("--strict"),safety:j()});if(n.json)console.log(JSON.stringify(v,null,2));else {let I=v.status==="passed"?s.green:v.status==="warning"?s.yellow:s.red;console.log(I(`\u2714 Workspace archive doctor ${v.status}: ${v.archivePath}`)),console.log(s.gray(`   Workspace: ${v.workspaceName}`)),console.log(s.gray(`   Files: ${v.fileCount}`));for(let x of v.checks){let P=x.status==="passed"?"\u2714":x.status==="warning"?"\u26A0":"\u2718";console.log(s.gray(`   ${P} ${x.id}: ${x.message}`));}for(let x of v.recommendedActions)console.log(s.gray(`   Next: ${x}`));}(v.status==="failed"||v.status==="warning"&&n.strict)&&process.exit(1);return}let h=await k({archivePathOrUrl:d,requireChecksums:n.strict===true||i("--strict"),safety:j()});if(n.json)console.log(JSON.stringify(h,null,2));else if(h.status==="passed")console.log(s.green(`\u2714 Workspace archive verified: ${h.archivePath}`)),console.log(s.gray(`   Files: ${h.verifiedFiles}/${h.fileCount}`));else {let v=h.status==="failed"?s.red:s.yellow;console.log(v(`\u274C Workspace archive verification ${h.status}: ${h.archivePath}`)),h.missingArchiveEntries.length&&console.log(s.gray(`   Missing entries: ${h.missingArchiveEntries.join(", ")}`)),h.extraArchiveEntries.length&&console.log(s.gray(`   Unexpected entries: ${h.extraArchiveEntries.join(", ")}`)),h.mismatches.length&&console.log(s.gray(`   Mismatches: ${h.mismatches.map(I=>I.path).join(", ")}`)),h.missingChecksumFiles.length&&console.log(s.gray(`   Missing checksums: ${h.missingChecksumFiles.join(", ")}`));}(h.status==="failed"||h.status==="warning"&&n.strict)&&process.exit(1);}catch(h){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,error:{code:`workspace.archive.${e}.failed`,message:h.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive ${e} failed: ${h.message}`)),process.exit(1);}}else if(t==="connect"){let d=b.resolve(e||process.cwd());try{let m=await vs({workspacePath:d,dryRun:n.dryRun===true||i("--dry-run"),projectGrounding:n.projectGrounding});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(s.green(m.status==="preview"?`\u2714 Workspace connection preview: ${d}`:`\u2714 Workspace connected: ${d}`));for(let w of m.warnings)console.log(s.yellow(`   \u26A0 ${w}`));}catch(m){let w=m instanceof Error?m.message:String(m);n.json?console.log(JSON.stringify(c$1({operation:"workspace connect",code:"workspace.connect.failed",message:w}),null,2)):console.log(s.red(`\u274C Workspace connect failed: ${w}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let d=e;d||(n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.input-required",message:"workspace import requires an archive path or URL."}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.hydrate.input-required",message:"workspace hydrate requires an archive path or URL."}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));try{if(t==="import"){let m=await Ps({archivePathOrUrl:d,outputPath:l(),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),projectGrounding:n.projectGrounding,safety:j()});if(n.json){console.log(JSON.stringify(m,null,2));return}console.log(s.green(m.status==="preview"?`\u2714 Workspace import preview: ${m.workspacePath}`:`\u2714 Workspace imported and registered: ${m.workspacePath}`));for(let w of m.warnings)console.log(s.yellow(`   \u26A0 ${w}`));}else {let{hydrateWorkspaceArchive:m}=await import('./workspace-archive-3AURTMYA.js'),w=await m({archivePathOrUrl:d,outputPath:l(),force:n.force===true||i("--force"),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),safety:j()});if(n.json){console.log(JSON.stringify(w,null,2));return}console.log(s.green(w.dryRun?`\u2714 Workspace archive hydrate preview: ${w.outputPath}`:`\u2714 Workspace archive hydrated: ${w.outputPath}`)),console.log(s.gray(`   Files: ${w.files.length}`)),w.manifest?.workspaceName&&console.log(s.gray(`   Workspace: ${w.manifest.workspaceName}`));}}catch(m){let w=m instanceof Error?m.message:String(m);n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.failed",message:w,context:{archivePathOrUrl:d,...l()?{outputPath:l()}:{}}}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,...l()?{outputPath:l()}:{},dryRun:n.dryRun===true||i("--dry-run"),error:{code:`workspace.${t}.failed`,message:w}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace ${t} failed: ${w}`)),process.exit(1);}}else if(t==="run"){let d=a(`run ${e||""}`.trim()),m=new Set(["init","test","build","start"]),w=e?.trim()??"";w||(console.log(s.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(s.gray("  \u2022 init   \u2014 run install/bootstrap across the project fleet")),console.log(s.gray("  \u2022 test   \u2014 run test suite across selected projects")),console.log(s.gray("  \u2022 build  \u2014 compile/package across selected projects")),console.log(s.gray("  \u2022 start  \u2014 start services (smoke/e2e scenarios)")),console.log(s.gray("  \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(s.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),m.has(w)||(!/^[a-z][a-z0-9_-]*$/i.test(w)||w==="dev"||w==="stop")&&(console.log(s.red(`Unknown workspace run stage: ${w}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),w==="dev"&&console.log(s.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2));let k=Is({raw:n.maxWorkers,operation:`workspace run ${w}`,json:n.json===true||i("--json")});if(w==="init"&&n.json!==true){let I=await Fs(d);I!==0&&process.exit(I);}let{runWorkspaceStage:h}=await import('./workspace-run-X7KV6MIT.js'),v=await h({workspacePath:d,stage:w,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:k,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true,planOnly:n.plan===true,runtime:n.runtime});n.json&&console.log(JSON.stringify(v,null,2)),v.summary.exitCode!==0&&process.exit(v.summary.exitCode);}else if(t==="explain"||t==="why"){let d=a(t),{parseWorkspaceExplainTarget:m}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:w,writeWorkspaceExplainReport:k}=await import('./workspace-explain-CATMJUMN.js'),h=(e??r??"").trim();!h&&n.scope&&(h=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),h||(h="release-blocked");let v=m(h);v||(console.log(s.red(`\u274C Invalid explain target: ${h}`)),process.exit(1));let I=await w({workspacePath:d,target:v}),x=n.write===true||i("--write"),P;if(x&&(P=await k(I,d,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$6(`workspace ${t}`,I,P),null,2));return}console.log(s.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${I.summary}`));for(let A of I.sections)console.log(s.bold(`
+${A.title}`)),console.log(A.body);P&&console.log(s.gray(`
+Written: ${P}`));}else if(t==="trace"){let d=a("trace"),m=n.from||e;m||(console.log(s.red("\u274C workspace trace requires --from <diff-ref>")),console.log(s.gray("   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:w}=await import('./workspace-explain-contract-KV7RTEJU.js'),{buildWorkspaceExplain:k,writeWorkspaceExplainReport:h}=await import('./workspace-explain-CATMJUMN.js'),v=w(m);(!v||v.kind!=="trace")&&(console.log(s.red(`\u274C Invalid trace ref: ${m}`)),console.log(s.gray("   Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let I=await k({workspacePath:d,target:v}),x=n.write===true||i("--write"),P;if(x&&(P=await h(I,d,"trace")),n.json){console.log(JSON.stringify(b$6("workspace trace",I,P),null,2));return}console.log(s.green(`\u2714 Workspace trace: ${I.summary}`));for(let A of I.sections)console.log(s.bold(`
+${A.title}`)),console.log(A.body);P&&console.log(s.gray(`
+Written: ${P}`));}else if(t==="eval"){let d=a("eval"),m=(e||"status").toLowerCase(),{WORKSPACE_EVALUATION_LAST_RUN_PATH:w,WORKSPACE_EVALUATION_LIVE_PATH:k,appendWorkspaceEvaluationEvent:h,compareWorkspaceEvaluations:v,createWorkspaceEvaluation:I,finalizeWorkspaceEvaluation:x,readWorkspaceEvaluation:P,writeWorkspaceEvaluation:A}=await import('./workspace-intelligence-evaluation-4AB4BBRP.js');if(m==="init"){let C=(r||"").trim(),_=(o||"workspace-intelligence").trim(),N=["full-corpus","grep","vector","graph","workspace-intelligence","custom"];(!C||!N.includes(_))&&(console.log(s.red("\u274C workspace eval init requires <task> and an optional valid strategy.")),console.log(s.gray(`   Strategies: ${N.join(" | ")}
+   npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:V}=await import('./workspace-marker-7U3NYRPJ.js'),D=await V(d),q=I({workspacePath:d,workspaceName:D?.name,taskId:C,strategy:_}),J=await A(d,q);if(n.json){console.log(JSON.stringify(b$6("workspace eval init",q,J),null,2));return}console.log(s.green(`\u2714 Evaluation started: ${C}`)),console.log(s.gray(`   Run: ${q.runId}`)),console.log(s.gray(`   Strategy: ${q.configuration.strategy}`)),console.log(s.gray(`   Live: ${J}`));return}if(m==="record"){!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:C,readStdinAll:_}=await import('./workspace-feedback-FF34CSJE.js'),N=C(await _());N||(console.log(s.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let V=await h({workspacePath:d,payload:N});console.log(JSON.stringify(V,null,2));}catch(V){console.log(JSON.stringify(c$1({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:V instanceof Error?V.message:String(V),context:{workspacePath:d}}),null,2)),process.exit(1);}return}if(m==="report"){let C=await x({workspacePath:d}),_=l(),N=C.outputPath;if(_){let V=b.resolve(d,_);b.resolve(C.outputPath)!==V&&await M__default.copy(C.outputPath,V,{overwrite:true}),N=V;}if(n.json){console.log(JSON.stringify(b$6("workspace eval report",C.report,N),null,2));return}console.log(s.green(`\u2714 Evaluation finalized: ${C.report.runId}`)),console.log(s.gray(`   Tokens: ${C.report.summary.tokens.observedTotal} \xB7 model calls ${C.report.summary.modelCalls} \xB7 tool calls ${C.report.summary.toolCalls}`)),console.log(s.gray(`   Outcome: ${C.report.summary.outcome.status}${C.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(s.gray(`   Written: ${N}`));return}if(m==="compare"){let C=(n.from||r||"").trim();C||(console.log(s.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let _=await P(d,w),N=await P(d,C),V=v(_,N);if(n.json){console.log(JSON.stringify(V,null,2));return}console.log(s.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(s.gray(`   Task aligned: ${V.taskAligned?"yes":"no"}`)),console.log(s.gray(`   Token delta: ${V.delta.tokens}`)),console.log(s.gray(`   Reduction: ${V.delta.reductionPercent===null?"unavailable":`${V.delta.reductionPercent}%`}`)),console.log(s.gray(`   Comparable verified outcome: ${V.comparableOutcome?"yes":"no"}`));return}if(m==="status"){let C;try{C=await P(d,k);}catch{C=await P(d,w);}if(n.json){console.log(JSON.stringify(C,null,2));return}console.log(s.green(`\u2714 Evaluation ${C.status}: ${C.configuration.taskId}`)),console.log(s.gray(`   Run: ${C.runId}`)),console.log(s.gray(`   Events: ${C.events.length}`)),console.log(s.gray(`   Tokens: ${C.summary.tokens.observedTotal} (${C.summary.tokenSources.providerReported} provider-reported calls, ${C.summary.tokenSources.estimated} estimated calls)`));return}console.log(s.red(`Unknown eval action: ${m}`)),console.log(s.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let d=a("feedback"),m=(e||"record").toLowerCase();m!=="record"&&(console.log(s.red(`Unknown feedback action: ${m}`)),console.log(s.gray("Available: record")),process.exit(1)),!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:w,parseFeedbackStdinPayload:k,readStdinAll:h}=await import('./workspace-feedback-FF34CSJE.js'),v=await h(),I=k(v);I||(console.log(s.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let x=await w({workspacePath:d,payload:I});n.json?console.log(JSON.stringify(x,null,2)):x.ok?(console.log(s.green("\u2714 Workspace feedback recorded")),console.log(s.gray(`   History: ${x.historyPath}`))):console.log(s.red(`\u274C ${x.error??"Failed to record feedback"}`)),x.ok||process.exit(1);}else if(t==="goal"){let d=a("goal"),m=(e||"status").toLowerCase(),w=r?.trim(),{planVerifiedGoal:k,readVerifiedGoal:h,verifyVerifiedGoal:v,VERIFIED_GOAL_SCHEMA_VERSION:I}=await import('./verified-goal-75KGBWTE.js'),x=P=>{if(n.json){console.log(JSON.stringify(P,null,2));return}let A=P.goal;console.log(P.status.state==="verified"?s.green("\u2714 Verified goal satisfied"):s.cyan(P.resumed?"\u21BB Verified goal resumed":"\u25C6 Verified goal ready")),A&&console.log(s.bold(`   ${A.summary}`)),console.log(s.gray(`   Goal: ${P.status.goalId}`)),console.log(s.gray(`   Progress: ${P.status.progress.message}`)),console.log(s.gray(`   State: ${P.status.state}`)),P.status.blockingReasons.length>0&&console.log(s.gray(`   Remaining: ${P.status.blockingReasons[0]}`)),P.status.nextActions.length>0&&console.log(s.gray(`   Next: ${P.status.nextActions[0]}`)),console.log(s.gray(`   Status: ${P.status.artifactPath}`));};if(m==="plan"){if(!w||!["release-readiness","dependency-security","test-coverage"].includes(w)){let V="Goal kind must be release-readiness, dependency-security, or test-coverage.";n.json?console.log(JSON.stringify(c$1({operation:"workspace goal plan",code:"workspace.goal.kind.invalid",message:V}),null,2)):console.log(s.red(`\u274C ${V}`)),process.exit(1);}let A=Number(n.target??80);if(!Number.isFinite(A)||A<0||A>100)throw new Error("--target must be a number from 0 to 100.");let C=["node","bun","deno","python","go","java","dotnet","rust","php","ruby","elixir","clojure","scala","kotlin","c","cpp"],_=n.runtime;if(w==="test-coverage"&&_!==void 0&&!C.includes(_))throw new Error(`--runtime must be one of: ${C.join(", ")}.`);let N=await k({workspacePath:d,kind:w,scope:n.scope,target:A,runtime:w==="test-coverage"?_:void 0,allowBreakingChanges:n.allowBreaking===true,allowForce:n.allowForce===true,requireBuild:n.build!==false,requireTests:n.tests!==false});x(N);}else if(m==="status"){if(!w)throw new Error("workspace goal status requires a goal id.");let P=await h(d,w);x({...P,resumed:P.status.state!=="verified"});}else if(m==="verify"){if(!w)throw new Error("workspace goal verify requires a goal id.");let P=await h(d,w),A=await v({workspacePath:d,goalId:w,run:n.run!==false,runIntelligence:n.reuseIntelligence!==true});x({goal:P.goal,status:A}),A.state!=="verified"&&process.exit(2);}else {let P=`Unknown workspace goal action: ${m}`;n.json?console.log(JSON.stringify(c$1({operation:"workspace goal",code:"workspace.goal.action.invalid",message:P,context:{schemaVersion:I,availableActions:["plan","status","verify"]}}),null,2)):console.log(s.red(`\u274C ${P}`)),process.exit(1);}}else if(t==="mcp"){let d=a("mcp"),m=(e||"serve").toLowerCase();m!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:m,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${m}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(s.red(`Unknown mcp action: ${m}`)),console.log(s.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:w}=await import('./workspace-mcp-serve-67NTYD67.js');n.json||console.error(s.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await w({workspacePath:d});}else if(t==="init"){n.json||(console.log(s.yellow("\u2139  workspace init is an alias of: npx workspai workspace run init")),console.log(s.gray(`   Equivalent full-init aliases at workspace root:
    npx workspai init | npx workspai workspace init | npx workspai workspace run init
-`)));let d=a("init"),m=Ps({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||i("--json")});if(n.json!==true){let h=await _s(d);h!==0&&process.exit(h);}let{runWorkspaceStage:w}=await import('./workspace-run-NVQGRZYO.js'),y=await w({workspacePath:d,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:m,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(y,null,2)),y.summary.exitCode!==0&&process.exit(y.summary.exitCode);}else (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:no}}),null,2)),process.exit(1)),console.log(s.red(`Unknown workspace action: ${t}`)),console.log(s.gray(`Available: ${no.join(", ")}`)),process.exit(1);});function co(t){let e="\u2500".repeat(46);console.log(""),console.log(s.gray(e)),console.log(s.bold(t)),console.log(s.gray(e));}function iu(){let t=n=>n.replace(/\bnpx (?:rapidkit|workspai)\b/g,ks),e=(n,a)=>{let i=t(n);if(i.length>65){console.log(s.cyan(`  ${i}`)),console.log(s.gray(`      ${a}`));return}console.log(s.cyan(`  ${i.padEnd(67)}  `)+s.gray(a));},r=(n,a)=>{console.log(s.white(`  ${n}`));for(let i=0;i<a.length;i+=8)console.log(s.gray(`    ${a.slice(i,i+8).join(" \xB7 ")}`));};console.log(s.white(`Usage:
-`)),console.log(s.cyan(`  ${ks} <command> [options]
-`)),Bf==="rapidkit"&&console.log(s.gray(`  You are using the legacy rapidkit alias. New docs use ${ks}.
+`)));let d=a("init"),m=Is({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||i("--json")});if(n.json!==true){let h=await Fs(d);h!==0&&process.exit(h);}let{runWorkspaceStage:w}=await import('./workspace-run-X7KV6MIT.js'),k=await w({workspacePath:d,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:m,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(k,null,2)),k.summary.exitCode!==0&&process.exit(k.summary.exitCode);}else (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:io}}),null,2)),process.exit(1)),console.log(s.red(`Unknown workspace action: ${t}`)),console.log(s.gray(`Available: ${io.join(", ")}`)),process.exit(1);});function mo(t){let e="\u2500".repeat(46);console.log(""),console.log(s.gray(e)),console.log(s.bold(t)),console.log(s.gray(e));}function ku(){let t=n=>n.replace(/\bnpx (?:rapidkit|workspai)\b/g,xs),e=(n,a)=>{let i=t(n);if(i.length>65){console.log(s.cyan(`  ${i}`)),console.log(s.gray(`      ${a}`));return}console.log(s.cyan(`  ${i.padEnd(67)}  `)+s.gray(a));},r=(n,a)=>{console.log(s.white(`  ${n}`));for(let i=0;i<a.length;i+=8)console.log(s.gray(`    ${a.slice(i,i+8).join(" \xB7 ")}`));};console.log(s.white(`Usage:
+`)),console.log(s.cyan(`  ${xs} <command> [options]
+`)),ch==="rapidkit"&&console.log(s.gray(`  You are using the legacy rapidkit alias. New docs use ${xs}.
 `)),console.log(s.bold(`Open-Source Workspace Intelligence for Software Systems
 `)),console.log(s.white("Connect projects, contracts, evidence, and checks so developers, CI, IDEs, and AI agents share one current view of the system.")),console.log(s.dim(`One workspace. One truth. Humans and AI aligned.
-`)),co("Workspace Lifecycle"),console.log(""),e("npx workspai create workspace my-workspace --profile minimal --yes","Start a new canonical workspace"),e("npx workspai create project","Choose an official frontend or backend kit interactively"),e("npx workspai create project nextjs web --yes","Scaffold an official kit and register the project"),e("npx workspai adopt .","Link the current project without moving its source"),e("npx workspai import <path|git-url>","Copy or clone software into a workspace"),e("npx workspai workspace intelligence run --for-agent generic --strict --json","Build or refresh the complete canonical evidence chain"),e("npx workspai agent bootstrap --for-agent <host> --strict --json","Prove agent entry before broad source discovery"),co("Golden Path \xB7 Understand \u2192 Impact \u2192 Act \u2192 Verify"),console.log(""),e('npx workspai goal "<outcome>" --for-agent generic',"Auto-bind a project or choose a bounded multi-project scope"),e('npx workspai goal "<coverage outcome>" --scope projects:a,b --runtime node',"Bind automation explicitly to canonical projects and runtime"),e('npx workspai workspace graph search "<question>" --scope project:<name> --json',"Retrieve focused, proof-backed evidence"),e("npx workspai workspace diff --from git:HEAD~1 --json","Model what changed"),e("npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json","Bound the affected system before action"),e("npx workspai workspace repair --help","Plan, approve, execute, verify, or roll back"),e("npx workspai workspace verify --strict --json","Prove canonical workspace evidence"),co("Workspace Intelligence \xB7 What the loop builds"),console.log(s.gray(`
+`)),mo("Workspace Lifecycle"),console.log(""),e("npx workspai create workspace my-workspace --profile minimal --yes","Start a new canonical workspace"),e("npx workspai create project","Choose an official frontend or backend kit interactively"),e("npx workspai create project nextjs web --yes","Scaffold an official kit and register the project"),e("npx workspai adopt .","Link the current project without moving its source"),e("npx workspai import <path|git-url>","Copy or clone software into a workspace"),e("npx workspai workspace intelligence run --for-agent generic --strict --json","Build or refresh the complete canonical evidence chain"),e("npx workspai agent bootstrap --for-agent <host> --strict --json","Prove agent entry before broad source discovery"),mo("Golden Path \xB7 Understand \u2192 Impact \u2192 Act \u2192 Verify"),console.log(""),e('npx workspai goal "<outcome>" --for-agent generic',"Auto-bind a project or choose a bounded multi-project scope"),e('npx workspai goal "<coverage outcome>" --scope projects:a,b --runtime node',"Bind automation explicitly to canonical projects and runtime"),e('npx workspai workspace graph search "<question>" --scope project:<name> --json',"Retrieve focused, proof-backed evidence"),e("npx workspai workspace diff --from git:HEAD~1 --json","Model what changed"),e("npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json","Bound the affected system before action"),e("npx workspai workspace repair --help","Plan, approve, execute, verify, or roll back"),e("npx workspai workspace verify --strict --json","Prove canonical workspace evidence"),mo("Workspace Intelligence \xB7 What the loop builds"),console.log(s.gray(`
   Code \xB7 APIs \xB7 infrastructure \xB7 docs \xB7 policies \xB7 runtime evidence`)),console.log(s.gray("                              \u2193")),console.log(s.gray("                   Canonical Workspace Model")),console.log(s.gray("                              \u2193")),console.log(s.gray("                Evidence-backed Knowledge Graph")),console.log(s.gray("                              \u2193")),console.log(s.gray(`       diff \xB7 impact \xB7 Doctor \xB7 context \xB7 repair \xB7 verify \xB7 explain
-`)),e("npx workspai workspace model --write --json","Build the canonical system model"),e("npx workspai workspace graph search <query> --json","Ask a bounded, proven question"),e("npx workspai doctor workspace --json","Diagnose projects and workspace health"),e("npx workspai project coverage --run --target 80 --json","Measure one project"),e("npx workspai workspace explain <target> --write --json","Explain a blocker or project"),e("npx workspai live .","Watch every Workspai run and active architecture block live"),e("npx workspai readiness --strict --json","Evaluate release readiness"),e("npx workspai pipeline --strict --json","Run the broader governance and release loop"),co("Complete Command Map"),console.log(s.gray(`
+`)),e("npx workspai workspace model --write --json","Build the canonical system model"),e("npx workspai workspace graph search <query> --json","Ask a bounded, proven question"),e("npx workspai doctor workspace --json","Diagnose projects and workspace health"),e("npx workspai project coverage --run --target 80 --json","Measure one project"),e("npx workspai workspace explain <target> --write --json","Explain a blocker or project"),e("npx workspai live .","Watch every Workspai run and active architecture block live"),e("npx workspai readiness --strict --json","Evaluate release readiness"),e("npx workspai pipeline --strict --json","Run the broader governance and release loop"),mo("Complete Command Map"),console.log(s.gray(`
   Commands are grouped by execution owner; use any command with --help.
-`));let o=Xd().commands;r("Native Workspai orchestration",o.npmOwned),r("Core-backed operations",o.coreBacked),r("Project runtime shortcuts",o.projectScoped),co("Find the right command"),console.log(""),e("npx workspai create --help","Creation, adoption, import, and supported kits"),e("npx workspai workspace --help","Model, graph, evidence, operations, and governance"),e("npx workspai doctor --help","Project and workspace diagnosis"),e("npx workspai commands --json","Complete machine-readable command inventory"),e("npx workspai mirror [status|sync|verify|rotate]","Registry mirror management"),e("npx workspai cache [status|clear|prune|repair]","Package cache management"),console.log(s.bold(`
+`));let o=pu().commands;r("Native Workspai orchestration",o.npmOwned),r("Core-backed operations",o.coreBacked),r("Project runtime shortcuts",o.projectScoped),mo("Find the right command"),console.log(""),e("npx workspai create --help","Creation, adoption, import, and supported kits"),e("npx workspai workspace --help","Model, graph, evidence, operations, and governance"),e("npx workspai doctor --help","Project and workspace diagnosis"),e("npx workspai commands --json","Complete machine-readable command inventory"),e("npx workspai mirror [status|sync|verify|rotate]","Registry mirror management"),e("npx workspai cache [status|clear|prune|repair]","Package cache management"),console.log(s.bold(`
 Flags clarification:`)),console.log(s.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(s.gray(`  --skip-essentials           core flag for skipping essential module installation
-`)),qf?(console.log(s.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(s.gray("  npx workspai my-project --template fastapi")),console.log(s.gray("  npx workspai my-project --template nestjs")),console.log(s.gray("  npx workspai my-project --template springboot")),console.log(s.gray("  npx workspai my-project --template gofiber")),console.log(s.gray("  npx workspai my-project --template gogin")),console.log(s.gray("  npx workspai my-project --template dotnet")),console.log(s.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
+`)),lh?(console.log(s.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(s.gray("  npx workspai my-project --template fastapi")),console.log(s.gray("  npx workspai my-project --template nestjs")),console.log(s.gray("  npx workspai my-project --template springboot")),console.log(s.gray("  npx workspai my-project --template gofiber")),console.log(s.gray("  npx workspai my-project --template gogin")),console.log(s.gray("  npx workspai my-project --template dotnet")),console.log(s.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
 `))):console.log(s.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
-`));}var Bd="__rapidkit_signal_handlers_registered__",qd=globalThis;qd[Bd]||(qd[Bd]=true,process.on("SIGINT",async()=>{if(!$n){if($n=true,console.log(s.yellow(`
+`));}var su="__rapidkit_signal_handlers_registered__",iu=globalThis;iu[su]||(iu[su]=true,process.on("SIGINT",async()=>{if(!Ln){if(Ln=true,console.log(s.yellow(`
 
-\u26A0\uFE0F  Interrupted by user`)),Dt&&await M__default.pathExists(Dt)){console.log(s.gray("Cleaning up partial installation..."));try{await M__default.remove(Dt),console.log(s.green("\u2713 Cleanup complete"));}catch(t){e.debug("Cleanup failed:",t);}}b$6(130,"Interrupted by user"),process.exit(130);}}),process.on("SIGTERM",async()=>{if(!$n){if($n=true,e.debug("Received SIGTERM"),Dt&&await M__default.pathExists(Dt))try{await M__default.remove(Dt);}catch(t){e.debug("Cleanup failed:",t);}b$6(143,"Terminated"),process.exit(143);}}));var Xf=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",Qf=(()=>{let t=process.argv[1];if(!t)return  false;let e=t.replace(/\\/g,"/"),r=e.endsWith("/dist/index.js")||e.endsWith("/src/index.ts");try{return O.realpathSync(t)===O.realpathSync(fileURLToPath(import.meta.url))||r}catch{return P.resolve(t)===P.resolve(fileURLToPath(import.meta.url))||r}})(),Zf=!Xf||Qf;function eh(){for(let t of [process.stdout,process.stderr])t._handle?.setBlocking?.(true);}function th(){for(let t of [process.stdout,process.stderr]){if(t.isTTY)continue;let e=t;if(e.__rapidkitSyncWriteInstalled)continue;let r=t.fd;if(typeof r!="number")continue;let o=t.write.bind(t);e.write=((n,a,i)=>{let c=typeof a=="string"?a:"utf8",l=typeof a=="function"?a:typeof i=="function"?i:void 0;try{let p=typeof n=="string"?Buffer.from(n,c):n instanceof Uint8Array?Buffer.from(n):Buffer.from(String(n),c);return O.writeSync(r,p),l?.(),true}catch{return o(n,c,l)}}),e.__rapidkitSyncWriteInstalled=true;}}async function Ve(t){b$6(t),await new Promise(e=>setImmediate(e)),await new Promise(e=>setTimeout(e,25)),await Promise.all([process.stdout,process.stderr].map(e=>new Promise(r=>{e.write("",()=>r());}))),process.exit(t);}async function vs(t,e=0){return O.writeSync(process.stdout.fd??1,t),Ve(e)}async function rh(){eh(),th(),d$7(),c$6(process.argv),a$6({argv:process.argv,cwd:process.cwd(),rapidkitVersion:h(),activityBlueprint:zp(process.argv.slice(2))});let t=process.argv.slice(2),e=t[0],r=process.cwd(),o=ot(r),n=u(r,"project.json").some(u=>O.existsSync(u)),a$1=Cf(),i=Fd(t),c=a$1&&lo(t),l$1=e==="init"&&o&&!n,p=t.length===0||t.length===1&&(e==="--help"||e==="-h"||e==="help"),g=e==="version"&&t.slice(1).every(u=>u==="--json"||u==="--no-color");td(t)&&await vs(`${od(t[1])}
-`),p&&(a("npm cli"),iu(),await Ve(0)),(g||t.some(u=>u==="--version"||u==="-V"||u==="-v"))&&!t.some(u=>u==="--help"||u==="-h"||u==="help")&&(t.includes("--json")?await vs(`${JSON.stringify(Sf(),null,2)}
-`):await vs(`${h()}
-`)),Es(t)&&await Ve(0),c&&e===bn?(async()=>{await Ve(await Cs(t));})().catch(u=>{process.stderr.write(`Workspai CLI failed to run create: ${u?.message??u}
-`),process.exit(1);}):c&&Gd(e)?(async()=>{await Ve(await Vd(e,t));})().catch(u=>{process.stderr.write(`Workspai CLI failed to run ${e}: ${u?.message??u}
-`),process.exit(1);}):i||c?he.parseAsync().then(()=>{let u=Number(process.exitCode??0);return Ve(Number.isInteger(u)?u:1)}).catch(u=>{let f=Cr()&&u instanceof Error&&u.stack?u.stack:u?.message??u;process.stderr.write(`Workspai CLI failed: ${f}
-`),process.exit(1);}):l$1?Os(t).then(u=>Ve(u)).catch(u=>{process.stderr.write(`Workspai CLI failed to run workspace init: ${u?.message??u}
-`),process.exit(1);}):Uf().then(async u=>{if(!u){let f=process.argv.slice(2);if(Cr()&&process.stderr.write(`[workspai-cli] argv=${JSON.stringify(f)}
-`),Fd(f)){await he.parseAsync();return}if(Es(f)&&await Ve(0),f[0]===bn){let k=await Cs(f);await Ve(k);}if(f[0]==="init"){let k=await Os(f);await Ve(k);}if(Gd(f[0])){let k=await Vd(f[0],f);await Ve(k);}if(t$2(f[0])){if(As(f))return;let k=f[0],S=j$2(process.cwd()),A=await zt(process.cwd()),E=Ie(process.cwd()),d=false;if(E){let h=t$1(E,"policies.yml").find(v=>O.existsSync(v));if(h&&await M__default.pathExists(h))try{let v=await O.promises.readFile(h,"utf-8");if(d=((v.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??v.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict",d){let C=t$1(E,"toolchain.lock").find(_=>O.existsSync(_)),$=[];if(!C||!await M__default.pathExists(C))$.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain).");else try{let N=JSON.parse(await O.promises.readFile(C,"utf-8")).runtime??{};k$2(S,process.cwd())&&!N.go?.version&&$.push("Go runtime version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."),l(S,process.cwd())&&!N.node?.version&&$.push("Node runtime version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."),m$2(S,process.cwd())&&!N.java?.version&&$.push("Java runtime version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."),n$1(S,process.cwd())&&!N.dotnet?.version&&$.push(".NET runtime version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."),o$2(S,process.cwd())&&!N.python?.version&&$.push("Python runtime version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");}catch{$.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode.");}let j=t$1(E,"workspace.json").find(_=>O.existsSync(_));if(j&&await M__default.pathExists(j))try{let N=JSON.parse(await O.promises.readFile(j,"utf-8")).profile??"",V=m$3(process.cwd(),S),L=o$3({profile:N,runtime:V.runtime,subjectLabel:P.basename(process.cwd()),mode:"strict"});L.ok||$.push(`${L.message} Update the workspace profile or use a polyglot workspace.`);}catch{}if($.length>0){console.log(s.red(`\u274C Strict policy violations block \`${k}\`:`));for(let _ of $)console.log(s.red(`  \u2022 ${_}`));console.log(s.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .workspai/policies.yml")),await Ve(1);}}}catch{}}let m=await a$7({startPath:process.cwd(),action:k,writeReport:true}),w=d||process.env.RAPIDKIT_LIFECYCLE_ENFORCE_READINESS==="1"||process.env.RAPIDKIT_ENFORCE_READINESS==="1";if(m.blocking&&w){console.log(s.red(`\u274C Release readiness blocks \`${k}\`:`));for(let h of m.blockingReasons)console.log(s.red(`  \u2022 ${h}`));m.evidencePath&&console.log(s.gray(`\u2139\uFE0F  Readiness evidence: ${m.evidencePath}`)),await Ve(1);}m.overallStatus!=="pass"&&!w&&(console.log(s.yellow(`\u26A0\uFE0F  Release readiness is ${m.overallStatus}. Command continues in warn mode.`)),m.evidencePath&&console.log(s.gray(`   Evidence: ${m.evidencePath} (set RAPIDKIT_LIFECYCLE_ENFORCE_READINESS=1 to block)`)));let y=await ou(process.cwd(),async()=>{if(k$2(S,process.cwd())||A==="go"){let h=Ye("go",{runCommandInCwd:Ae,runCoreRapidkit:e$2});if(k==="lint")return se(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(k==="format")return se(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=k==="dev"?await h.runDev(process.cwd()):k==="test"?await h.runTest(process.cwd()):k==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return v.message&&console.log(s.red(`\u274C ${v.message}`)),v.exitCode}if(m$2(S,process.cwd())||A==="java")return k==="dev"?await Ct("dev",process.cwd()):k==="test"?await Ct("test",process.cwd()):k==="build"?await Ct("build",process.cwd()):k==="lint"?await Ct("lint",process.cwd()):k==="format"?await Ct("format",process.cwd()):await Ct("start",process.cwd());if(n$1(S,process.cwd())||A==="dotnet"){let h=Ye("dotnet",{runCommandInCwd:Ae,runCoreRapidkit:e$2});if(k==="lint")return se(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(k==="format")return se(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=k==="dev"?await h.runDev(process.cwd()):k==="test"?await h.runTest(process.cwd()):k==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return v.message&&console.log(s.red(`\u274C ${v.message}`)),v.exitCode}if(l(S,process.cwd())||A==="node")return k==="dev"?await qt("dev",process.cwd()):k==="test"?await qt("test",process.cwd()):k==="build"?await qt("build",process.cwd()):k==="lint"?await qt("lint",process.cwd()):k==="format"?await qt("format",process.cwd()):await qt("start",process.cwd());if(o$2(S,process.cwd())||A==="python"){if(k==="lint"||k==="format")return await e$2([k],{cwd:process.cwd()});let h=Ye("python",{runCommandInCwd:Ae,runCoreRapidkit:e$2});return se(k==="dev"?await h.runDev(process.cwd()):k==="test"?await h.runTest(process.cwd()):k==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd()))}if(A==="rust"||A==="php"){let h=Ye(A,{runCommandInCwd:Ae,runCoreRapidkit:e$2});if(k==="lint")return se(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(k==="format")return se(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=k==="dev"?await h.runDev(process.cwd()):k==="test"?await h.runTest(process.cwd()):k==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return se(v)}return  -1});if(!y.ok){await Ve(y.code);return}if(y.ok&&y.value>=0){await Ve(y.value);return}if(y.ok&&y.value===-1){console.error(s.red(`\u274C Workspai cannot run \`${k}\` for this project runtime.`)),console.error(s.gray("Run `workspai project commands` to inspect supported commands.")),await Ve(1);return}}if(As(f))return;let b=await zf(f);if(Cr()&&process.stderr.write(`[workspai-cli] shouldForwardToCore=${b}
-`),b){let k=await e$2(f,{cwd:process.cwd()});await Ve(k);}await he.parseAsync();}});}Zf&&await rh();export{as as COMMAND_CAPABILITIES_SCHEMA_VERSION,ef as NPM_ONLY_SCOPED_COMMANDS,tf as NPM_ONLY_TOP_LEVEL_COMMANDS,pd as VERSION_CONTRACT_SCHEMA_VERSION,vf as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,rh as bootstrapCli,ms as bridgeFailureCode,js as buildDelegationEnvForInit,Ud as checkStrictPolicyPreflightForDelegation,sf as commandAvailable,zd as createProjectVenv,lf as createWorkspaceVenv,If as defaultWorkspacePolicyYaml,Af as detectWindowsDoctorWorkspaceShadow,df as ensurePythonProjectUsesLocalVenv,pf as ensureWorkspaceVenvHasPip,Qd as findContextFileUp,Rf as findLegacyWorkspaceUp,Rs as findWorkspaceMarkerUp,Ie as findWorkspaceUp,Xd as getGlobalCommandCapabilities,An as getPublishedContractCatalog,so as getPublishedContractVersions,Sf as getVersionContract,nu as handleAdoptCommand,Ff as handleBootstrapCommand,Jf as handleCacheCommand,Cs as handleCreateOrFallback,ws as handleGoInit,xs as handleImportCommand,Os as handleInitCommand,Ct as handleJavaCommand,Hf as handleMirrorCommand,qt as handleNodeCommand,Gf as handleSetupCommand,ot as hasWorkspaceRootMarkers,Ms as hostPythonCandidates,zt as inferRuntimeByFiles,uf as installPythonDependenciesWithPipFallback,_s as installWorkspaceDependencies,Cf as isNpmExecInvocation,lo as isNpmOnlyInvocation,Gd as isNpmOnlyManualHandlerCommand,bf as isNpmOnlyParseDirectCommand,Fd as isNpmOnlyParseDirectInvocation,Ss as isNpmOnlyScopedCommand,jf as isNpmOnlyTopLevelCommand,of as normalizeFallbackTemplate,Vf as parseCacheConfig,nf as parseMaxWorkersOption,Tf as parseNodeEvalScript,Nf as parsePolicyBooleanLiteral,iu as printHelp,he as program,_e as readFlagValue,_f as replaceOrInsertRulePolicyLine,Kd as replaceOrInsertTopLevelPolicyLine,rf as resolveInvokedCliName,Ae as runCommandInCwd,Nn as runCreateFallback,zf as shouldForwardToCore,mf as validateNpmKitFlags};
+\u26A0\uFE0F  Interrupted by user`)),Dt&&await M__default.pathExists(Dt)){console.log(s.gray("Cleaning up partial installation..."));try{await M__default.remove(Dt),console.log(s.green("\u2713 Cleanup complete"));}catch(t){e.debug("Cleanup failed:",t);}}b$7(130,"Interrupted by user"),process.exit(130);}}),process.on("SIGTERM",async()=>{if(!Ln){if(Ln=true,e.debug("Received SIGTERM"),Dt&&await M__default.pathExists(Dt))try{await M__default.remove(Dt);}catch(t){e.debug("Cleanup failed:",t);}b$7(143,"Terminated"),process.exit(143);}}));var uh=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",mh=(()=>{let t=process.argv[1];if(!t)return  false;let e=t.replace(/\\/g,"/"),r=e.endsWith("/dist/index.js")||e.endsWith("/src/index.ts");try{return $.realpathSync(t)===$.realpathSync(fileURLToPath(import.meta.url))||r}catch{return b.resolve(t)===b.resolve(fileURLToPath(import.meta.url))||r}})(),gh=!uh||mh;function fh(){for(let t of [process.stdout,process.stderr])t._handle?.setBlocking?.(true);}function hh(){for(let t of [process.stdout,process.stderr]){if(t.isTTY)continue;let e=t;if(e.__rapidkitSyncWriteInstalled)continue;let r=t.fd;if(typeof r!="number")continue;let o=t.write.bind(t);e.write=((n,a,i)=>{let c=typeof a=="string"?a:"utf8",l=typeof a=="function"?a:typeof i=="function"?i:void 0;try{let p=typeof n=="string"?Buffer.from(n,c):n instanceof Uint8Array?Buffer.from(n):Buffer.from(String(n),c);return $.writeSync(r,p),l?.(),true}catch{return o(n,c,l)}}),e.__rapidkitSyncWriteInstalled=true;}}async function Ve(t){b$7(t),await new Promise(e=>setImmediate(e)),await new Promise(e=>setTimeout(e,25)),await Promise.all([process.stdout,process.stderr].map(e=>new Promise(r=>{e.write("",()=>r());}))),process.exit(t);}async function Fn(t,e=0){return $.writeSync(process.stdout.fd??1,t),Ve(e)}async function wh(){fh(),hh(),d$7(),c$6(process.argv),a$6({argv:process.argv,cwd:process.cwd(),rapidkitVersion:h(),activityBlueprint:od(process.argv.slice(2))});let t=process.argv.slice(2),e=t[0],r=process.cwd(),o=Qe(r),n=u(r,"project.json").some(u=>$.existsSync(u)),a$1=Lf(),i=Zd(t),c=a$1&&go(t),l$1=e==="init"&&o&&!n,p=t.length===0||t.length===1&&(e==="--help"||e==="-h"||e==="help"),f=e==="version"&&t.slice(1).every(u=>u==="--json"||u==="--no-color");t$2(e)&&t.slice(1,t.indexOf("--")<0?void 0:t.indexOf("--")).some(u=>u==="--help"||u==="-h")&&await Fn(`Workspai ${e}
+
+Usage: workspai ${e}
+
+Run the project's ${e} command through its runtime adapter.
+Run workspai project commands --json to inspect project capabilities.
+Run workspai workspace run --help for fleet execution and planning.
+`),ld(t)&&await Fn(`${dd(t[1])}
+`),p&&(a("npm cli"),ku(),await Ve(0)),(f||t.some(u=>u==="--version"||u==="-V"||u==="-v"))&&!t.some(u=>u==="--help"||u==="-h"||u==="help")&&(t.includes("--json")?await Fn(`${JSON.stringify(Ff(),null,2)}
+`):await Fn(`${h()}
+`)),Ts(t)&&await Ve(0),c&&e===An?(async()=>{await Ve(await Ns(t));})().catch(u=>{process.stderr.write(`Workspai CLI failed to run create: ${u?.message??u}
+`),process.exit(1);}):c&&eu(e)?(async()=>{await Ve(await tu(e,t));})().catch(u=>{process.stderr.write(`Workspai CLI failed to run ${e}: ${u?.message??u}
+`),process.exit(1);}):i||c?he.parseAsync().then(()=>{let u=Number(process.exitCode??0);return Ve(Number.isInteger(u)?u:1)}).catch(u=>{let g=xr()&&u instanceof Error&&u.stack?u.stack:u?.message??u;process.stderr.write(`Workspai CLI failed: ${g}
+`),process.exit(1);}):l$1?Vs(t).then(u=>Ve(u)).catch(u=>{process.stderr.write(`Workspai CLI failed to run workspace init: ${u?.message??u}
+`),process.exit(1);}):ih().then(async u=>{if(!u){let g=process.argv.slice(2);if(xr()&&process.stderr.write(`[workspai-cli] argv=${JSON.stringify(g)}
+`),Zd(g)){await he.parseAsync();return}if(Ts(g)&&await Ve(0),g[0]===An){let y=await Ns(g);await Ve(y);}if(g[0]==="init"){let y=await Vs(g);await Ve(y);}if(eu(g[0])){let y=await tu(g[0],g);await Ve(y);}if(t$2(g[0])){if(Ms(g))return;let y=g[0],S=j$2(process.cwd()),E=await Xt(process.cwd()),R=Ae(process.cwd()),d=false;if(R){let h=t$1(R,"policies.yml").find(v=>$.existsSync(v));if(h&&await M__default.pathExists(h))try{let v=await $.promises.readFile(h,"utf-8");if(d=((v.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??v.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict",d){let P=t$1(R,"toolchain.lock").find(_=>$.existsSync(_)),A=[];if(!P||!await M__default.pathExists(P))A.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain).");else try{let N=JSON.parse(await $.promises.readFile(P,"utf-8")).runtime??{};k$2(S,process.cwd())&&!N.go?.version&&A.push("Go runtime version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."),l(S,process.cwd())&&!N.node?.version&&A.push("Node runtime version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."),m$2(S,process.cwd())&&!N.java?.version&&A.push("Java runtime version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."),n$1(S,process.cwd())&&!N.dotnet?.version&&A.push(".NET runtime version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."),o$2(S,process.cwd())&&!N.python?.version&&A.push("Python runtime version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");}catch{A.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode.");}let C=t$1(R,"workspace.json").find(_=>$.existsSync(_));if(C&&await M__default.pathExists(C))try{let N=JSON.parse(await $.promises.readFile(C,"utf-8")).profile??"",V=m$3(process.cwd(),S),D=o$3({profile:N,runtime:V.runtime,subjectLabel:b.basename(process.cwd()),mode:"strict"});D.ok||A.push(`${D.message} Update the workspace profile or use a polyglot workspace.`);}catch{}if(A.length>0){console.log(s.red(`\u274C Strict policy violations block \`${y}\`:`));for(let _ of A)console.log(s.red(`  \u2022 ${_}`));console.log(s.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .workspai/policies.yml")),await Ve(1);}}}catch{}}let m=await a$7({startPath:process.cwd(),action:y,writeReport:true}),w=d||process.env.RAPIDKIT_LIFECYCLE_ENFORCE_READINESS==="1"||process.env.RAPIDKIT_ENFORCE_READINESS==="1";if(m.blocking&&w){console.log(s.red(`\u274C Release readiness blocks \`${y}\`:`));for(let h of m.blockingReasons)console.log(s.red(`  \u2022 ${h}`));m.evidencePath&&console.log(s.gray(`\u2139\uFE0F  Readiness evidence: ${m.evidencePath}`)),await Ve(1);}m.overallStatus!=="pass"&&!w&&(console.log(s.yellow(`\u26A0\uFE0F  Release readiness is ${m.overallStatus}. Command continues in warn mode.`)),m.evidencePath&&console.log(s.gray(`   Evidence: ${m.evidencePath} (set RAPIDKIT_LIFECYCLE_ENFORCE_READINESS=1 to block)`)));let k=await fu(process.cwd(),async()=>{if(k$2(S,process.cwd())||E==="go"){let h=Xe("go",{runCommandInCwd:Re,runCoreRapidkit:e$2});if(y==="lint")return ce(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return ce(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=y==="dev"?await h.runDev(process.cwd()):y==="test"?await h.runTest(process.cwd()):y==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return v.message&&console.log(s.red(`\u274C ${v.message}`)),v.exitCode}if(m$2(S,process.cwd())||E==="java")return y==="dev"?await Ct("dev",process.cwd()):y==="test"?await Ct("test",process.cwd()):y==="build"?await Ct("build",process.cwd()):y==="lint"?await Ct("lint",process.cwd()):y==="format"?await Ct("format",process.cwd()):await Ct("start",process.cwd());if(n$1(S,process.cwd())||E==="dotnet"){let h=Xe("dotnet",{runCommandInCwd:Re,runCoreRapidkit:e$2});if(y==="lint")return ce(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return ce(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=y==="dev"?await h.runDev(process.cwd()):y==="test"?await h.runTest(process.cwd()):y==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return v.message&&console.log(s.red(`\u274C ${v.message}`)),v.exitCode}if(l(S,process.cwd())||E==="node")return y==="dev"?await Yt("dev",process.cwd()):y==="test"?await Yt("test",process.cwd()):y==="build"?await Yt("build",process.cwd()):y==="lint"?await Yt("lint",process.cwd()):y==="format"?await Yt("format",process.cwd()):await Yt("start",process.cwd());if(o$2(S,process.cwd())||E==="python"){if(y==="lint"||y==="format")return await e$2([y],{cwd:process.cwd()});let h=Xe("python",{runCommandInCwd:Re,runCoreRapidkit:e$2});return ce(y==="dev"?await h.runDev(process.cwd()):y==="test"?await h.runTest(process.cwd()):y==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd()))}if(E==="rust"||E==="php"){let h=Xe(E,{runCommandInCwd:Re,runCoreRapidkit:e$2});if(y==="lint")return ce(await h.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return ce(await h.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let v=y==="dev"?await h.runDev(process.cwd()):y==="test"?await h.runTest(process.cwd()):y==="build"?await h.runBuild(process.cwd()):await h.runStart(process.cwd());return ce(v)}return  -1});if(!k.ok){await Ve(k.code);return}if(k.ok&&k.value>=0){await Ve(k.value);return}if(k.ok&&k.value===-1){console.error(s.red(`\u274C Workspai cannot run \`${y}\` for this project runtime.`)),console.error(s.gray("Run `workspai project commands` to inspect supported commands.")),await Ve(1);return}}if(Ms(g))return;let j=await ph(g);if(xr()&&process.stderr.write(`[workspai-cli] shouldForwardToCore=${j}
+`),j){let y=await e$2(g,{cwd:process.cwd()});await Ve(y);}await he.parseAsync();}});}gh&&await wh();export{us as COMMAND_CAPABILITIES_SCHEMA_VERSION,gf as NPM_ONLY_SCOPED_COMMANDS,ff as NPM_ONLY_TOP_LEVEL_COMMANDS,yd as VERSION_CONTRACT_SCHEMA_VERSION,Tf as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,wh as bootstrapCli,js as bridgeFailureCode,_s as buildDelegationEnvForInit,au as checkStrictPolicyPreflightForDelegation,vf as commandAvailable,cu as createProjectVenv,bf as createWorkspaceVenv,Bf as defaultWorkspacePolicyYaml,Vf as detectWindowsDoctorWorkspaceShadow,Cf as ensurePythonProjectUsesLocalVenv,jf as ensureWorkspaceVenvHasPip,du as findContextFileUp,Jf as findLegacyWorkspaceUp,Ws as findWorkspaceMarkerUp,Ae as findWorkspaceUp,pu as getGlobalCommandCapabilities,_n as getPublishedContractCatalog,lo as getPublishedContractVersions,Ff as getVersionContract,hu as handleAdoptCommand,th as handleBootstrapCommand,nh as handleCacheCommand,Ns as handleCreateOrFallback,As as handleGoInit,Ls as handleImportCommand,Vs as handleInitCommand,Ct as handleJavaCommand,sh as handleMirrorCommand,Yt as handleNodeCommand,rh as handleSetupCommand,Qe as hasWorkspaceRootMarkers,Bs as hostPythonCandidates,Xt as inferRuntimeByFiles,Sf as installPythonDependenciesWithPipFallback,Fs as installWorkspaceDependencies,Lf as isNpmExecInvocation,go as isNpmOnlyInvocation,eu as isNpmOnlyManualHandlerCommand,Df as isNpmOnlyParseDirectCommand,Zd as isNpmOnlyParseDirectInvocation,$s as isNpmOnlyScopedCommand,Wf as isNpmOnlyTopLevelCommand,wf as normalizeFallbackTemplate,oh as parseCacheConfig,yf as parseMaxWorkersOption,Yf as parseNodeEvalScript,qf as parsePolicyBooleanLiteral,ku as printHelp,he as program,_e as readFlagValue,Hf as replaceOrInsertRulePolicyLine,ou as replaceOrInsertTopLevelPolicyLine,hf as resolveInvokedCliName,Re as runCommandInCwd,Dn as runCreateFallback,ph as shouldForwardToCore,Ef as validateNpmKitFlags};