workspai 0.75.0 → 0.75.2

package/dist/analyze-6UEBC5OJ.js

@@ -0,0 +1 @@
+export{b as printAnalyzeReport,a as runAnalyze}from'./chunk-K52IQX3J.js';

package/dist/{artifact-remediation-plan-HD5K52UJ.js → artifact-remediation-plan-SRH2Q6N2.js}

@@ -1 +1 @@
-export{a as buildArtifactRemediationPlan,b as writeArtifactRemediationPlan}from'./chunk-W7I65IXY.js';
+export{a as buildArtifactRemediationPlan,b as writeArtifactRemediationPlan}from'./chunk-3HXEPDFF.js';

package/dist/autopilot-release-H5TO6NYY.js

@@ -0,0 +1 @@
+export{b as AUTOPILOT_RELEASE_ALIAS_FILENAME,a as AUTOPILOT_RELEASE_LAST_RUN_FILENAME,c as runAutopilotRelease}from'./chunk-EP7SUMAX.js';

package/dist/chunk-2DZLCINC.js

@@ -0,0 +1 @@
+import {s}from'./chunk-ODK4LCEL.js';var _=s.artifactRemediationPlan.schemaVersion;export{_ as a};

package/dist/{chunk-W7I65IXY.js → chunk-3HXEPDFF.js}

@@ -1,3 +1,3 @@
-import {a as a$1,b as b$1}from'./chunk-O5XQP5E7.js';import {a as a$2}from'./chunk-7Q7X4X5I.js';import {b as b$2}from'./chunk-AO2ZI42U.js';import {a,h,e}from'./chunk-BLEIUQL6.js';import {b}from'./chunk-252EKOR6.js';import {t,s}from'./chunk-ODK4LCEL.js';import y from'path';import {existsSync}from'fs';import ie from'fs-extra';var oe=[{artifactKind:"bootstrap-compliance",cardId:"bootstrap",fileNames:["bootstrap-compliance.latest.json"]},{artifactKind:"doctor-workspace",cardId:"doctor",fileNames:["doctor-remediation-plan-last-run.json","doctor-last-run.json"]},{artifactKind:"analyze",cardId:"analyze",fileNames:["analyze-last-run.json"]},{artifactKind:"readiness",cardId:"readiness",fileNames:["release-readiness-last-run.json"]},{artifactKind:"pipeline",cardId:"pipeline",fileNames:["pipeline-last-run.json"]},{artifactKind:"workspace-run",cardId:"workspaceRun",fileNames:["workspace-run-last.json"]},{artifactKind:"workspace-verify",cardId:"workspaceVerify",fileNames:["workspace-verify-last-run.json"]}];function f(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function w(e){return Array.isArray(e)?e.filter(i=>typeof i=="string"&&i.trim().length>0):[]}function P(e){return [...new Set(e.map(i=>i.trim()).filter(Boolean))]}function J(e){return (e.notes.includes("Doctor finding status: blocking")?16:0)+(e.transaction?8:0)+(e.operation?4:0)+(e.invocation?2:0)+(e.strategy?.length?1:0)}function ne(e){let i=J(e.incoming)>J(e.existing),r=structuredClone(i?e.incoming:e.existing),o=i?e.existing:e.incoming,t=o.sourceStepId;return r.order=e.existing.order,r.files=P([...r.files,...o.files]),r.notes=P([...r.notes,...o.notes.filter(n=>!n.startsWith("Source Doctor capability:")&&!n.startsWith("Doctor finding status:")),...t?[`Also satisfies Doctor capability: ${t}`]:[]]),r}function ae(e,i,r){return r?i:y.relative(e,i).split(y.sep).join("/")}function D(e){return e.includeAbsolutePaths?e.projectPath:b$1({workspacePath:e.workspacePath,projectPath:e.projectPath,projectName:e.projectName}).contractRelativePath}function Z(e){let i=y.isAbsolute(e.filePath)?y.resolve(e.filePath):y.resolve(e.projectPath,e.filePath);if(e.includeAbsolutePaths)return i;let r=y.relative(e.projectPath,i);return !r||r===".."||r.startsWith(`..${y.sep}`)||y.isAbsolute(r)?void 0:`${D(e)}/${r.split(y.sep).join("/")}`}function se(e){let i=e?.trim()||"npx workspai bootstrap";if(!/(?:^|\s)--ci(?:\s|$)/.test(i)&&/(?:^|\s)--json(?:\s|$)/.test(i))return i.replace(/(?:^|\s)--json(?:\s|$)/,o=>{let t=o.startsWith(" ")?" ":"",n=o.endsWith(" ")?" ":"";return `${t}--ci --json${n}`}).trim();let r=/(?:^|\s)--ci(?:\s|$)/.test(i)?i:`${i} --ci`;return /(?:^|\s)--json(?:\s|$)/.test(r)?r:`${r} --json`}function M(e,i){return y.basename(e).toLowerCase().replace(/\.cmd$/,"")==="npx"&&i[0]==="workspai"&&!i.includes("--no-install")?["--no-install",...i]:i}function U(e){return {cwd:".",executable:"npx",args:M("npx",["workspai",...e])}}function ce(e){return `${JSON.stringify({schemaVersion:s.compatibilityMatrix.schemaVersion,generatedAt:e,source:"workspai workspace remediation-plan",runtimes:{},notes:["Minimal enterprise baseline. Add runtime and toolchain entries as governance matures."]},null,2)}
+import {a as a$1}from'./chunk-2DZLCINC.js';import {a as a$2}from'./chunk-7Q7X4X5I.js';import {b as b$1}from'./chunk-AO2ZI42U.js';import {a as a$3}from'./chunk-ROOPODG6.js';import {a,h,e}from'./chunk-BLEIUQL6.js';import {b}from'./chunk-252EKOR6.js';import {t,s}from'./chunk-ODK4LCEL.js';import y from'path';import {existsSync}from'fs';import ie from'fs-extra';var oe=[{artifactKind:"bootstrap-compliance",cardId:"bootstrap",fileNames:["bootstrap-compliance.latest.json"]},{artifactKind:"doctor-workspace",cardId:"doctor",fileNames:["doctor-remediation-plan-last-run.json","doctor-last-run.json"]},{artifactKind:"analyze",cardId:"analyze",fileNames:["analyze-last-run.json"]},{artifactKind:"readiness",cardId:"readiness",fileNames:["release-readiness-last-run.json"]},{artifactKind:"pipeline",cardId:"pipeline",fileNames:["pipeline-last-run.json"]},{artifactKind:"workspace-run",cardId:"workspaceRun",fileNames:["workspace-run-last.json"]},{artifactKind:"workspace-verify",cardId:"workspaceVerify",fileNames:["workspace-verify-last-run.json"]}];function f(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function w(e){return Array.isArray(e)?e.filter(i=>typeof i=="string"&&i.trim().length>0):[]}function P(e){return [...new Set(e.map(i=>i.trim()).filter(Boolean))]}function J(e){return (e.notes.includes("Doctor finding status: blocking")?16:0)+(e.transaction?8:0)+(e.operation?4:0)+(e.invocation?2:0)+(e.strategy?.length?1:0)}function ne(e){let i=J(e.incoming)>J(e.existing),r=structuredClone(i?e.incoming:e.existing),o=i?e.existing:e.incoming,t=o.sourceStepId;return r.order=e.existing.order,r.files=P([...r.files,...o.files]),r.notes=P([...r.notes,...o.notes.filter(n=>!n.startsWith("Source Doctor capability:")&&!n.startsWith("Doctor finding status:")),...t?[`Also satisfies Doctor capability: ${t}`]:[]]),r}function ae(e,i,r){return r?i:y.relative(e,i).split(y.sep).join("/")}function D(e){return e.includeAbsolutePaths?e.projectPath:a$3({workspacePath:e.workspacePath,projectPath:e.projectPath,projectName:e.projectName}).contractRelativePath}function Z(e){let i=y.isAbsolute(e.filePath)?y.resolve(e.filePath):y.resolve(e.projectPath,e.filePath);if(e.includeAbsolutePaths)return i;let r=y.relative(e.projectPath,i);return !r||r===".."||r.startsWith(`..${y.sep}`)||y.isAbsolute(r)?void 0:`${D(e)}/${r.split(y.sep).join("/")}`}function se(e){let i=e?.trim()||"npx workspai bootstrap";if(!/(?:^|\s)--ci(?:\s|$)/.test(i)&&/(?:^|\s)--json(?:\s|$)/.test(i))return i.replace(/(?:^|\s)--json(?:\s|$)/,o=>{let t=o.startsWith(" ")?" ":"",n=o.endsWith(" ")?" ":"";return `${t}--ci --json${n}`}).trim();let r=/(?:^|\s)--ci(?:\s|$)/.test(i)?i:`${i} --ci`;return /(?:^|\s)--json(?:\s|$)/.test(r)?r:`${r} --json`}function M(e,i){return y.basename(e).toLowerCase().replace(/\.cmd$/,"")==="npx"&&i[0]==="workspai"&&!i.includes("--no-install")?["--no-install",...i]:i}function U(e){return {cwd:".",executable:"npx",args:M("npx",["workspai",...e])}}function ce(e){return `${JSON.stringify({schemaVersion:s.compatibilityMatrix.schemaVersion,generatedAt:e,source:"workspai workspace remediation-plan",runtimes:{},notes:["Minimal enterprise baseline. Add runtime and toolchain entries as governance matures."]},null,2)}
 `}function de(e){return `${JSON.stringify({schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:e,note:"Minimal enterprise baseline. Set enabled: true and add artifact entries to activate mirroring."},null,2)}
-`}function le(e){let i=e.payload,r=w(i.blockers),o=w(i.blockingReasons),t=w(i.failures),n=w(i.reasons),d=w(i.policyViolations),c=f(i.summary),l=w(c?.blockers);if(e.artifactKind==="analyze"){let k=(Array.isArray(i.findings)?i.findings:[]).map(b=>f(b)).filter(b=>!!b).map(b=>String(b.message??b.title??b.id??"").trim()).filter(Boolean);return P([...r,...k,...o])}if(e.artifactKind==="workspace-run"){let p=f(i.stages),k=Object.entries(p??{}).flatMap(([b,s])=>{let a=f(s);return (Array.isArray(a?.projects)?a.projects:[]).map(u=>f(u)).filter(u=>!!u).filter(u=>u.status==="failed"||u.ok===false).map(u=>`${b}: ${String(u.project??u.name??"project")} failed`)});return P([...r,...k,...o])}return P([...r,...o,...t,...n,...d,...l])}function v(e){let i=e.findingId?.trim()||e.sourceStepId?.trim()||e.id,r=e.findingStatus??"blocking",o=e.causalKey?.trim()||[e.cardId,e.projectName??e.scope??"workspace",i].map(t=>String(t).trim().toLowerCase()).join(":");return {id:e.id,artifactKind:e.artifactKind,cardId:e.cardId,title:e.title,order:e.order,phase:e.phase,scope:e.scope??"workspace",...e.projectName?{projectName:e.projectName}:{},...e.projectPath?{projectPath:e.projectPath}:{},...e.sourceStepId?{sourceStepId:e.sourceStepId}:{},findingId:i,findingStatus:r,causalKey:o,...e.dependsOn?{dependsOn:e.dependsOn}:{},...e.strategy?{strategy:structuredClone(e.strategy)}:{},...e.transaction?{transaction:structuredClone(e.transaction)}:{},...e.requirements?{requirements:structuredClone(e.requirements)}:{},...e.retryPolicy?{retryPolicy:structuredClone(e.retryPolicy)}:{},status:e.status??"ready",mode:e.mode,risk:e.risk,requiresApproval:true,blocker:e.blocker,summary:e.summary,...e.command?{command:e.command}:{},...e.invocation?{invocation:structuredClone(e.invocation)}:{},verifyCommand:e.verifyCommand,cwd:e.cwd??"workspace",files:e.files??[],...e.operation?{operation:e.operation}:{},rollback:e.rollback??(e.operation?{available:true,strategy:"idempotent"}:{available:false,strategy:"none"}),notes:e.notes??[]}}function pe(e){return (Array.isArray(e.report.payload.steps)?e.report.payload.steps:[]).flatMap((r,o)=>{let t=f(r),n=typeof t?.id=="string"?t.id.trim():"",d=typeof t?.projectName=="string"?t.projectName.trim():"",c=typeof t?.projectPath=="string"?t.projectPath.trim():"",l=typeof t?.originalCommand=="string"?t.originalCommand.trim():"";if(!t||!n||!d||!c)return [];let p=f(t.studioStatus),k=p?.state==="ready"||p?.state==="review-required"||p?.state==="blocked"||p?.state==="guidance-only"?p.state:"guidance-only",b=t.risk==="safe"||t.risk==="guarded"||t.risk==="invasive"?t.risk:"guarded",s=f(t.preview),a=D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}),g=H({capability:{...t,command:l},absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),u=X({capability:t,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),R=E({operation:t.operation,absoluteProjectPath:c}),h=t.findingStatus==="blocking"||t.findingStatus==="advisory"||t.findingStatus==="informational"?t.findingStatus:"unknown",j=typeof t.diagnosisFindingId=="string"&&t.diagnosisFindingId.trim()?t.diagnosisFindingId.trim():typeof t.issueId=="string"&&t.issueId.trim()?t.issueId.trim():n,x=typeof t.causalKey=="string"&&t.causalKey.trim()?t.causalKey.trim():void 0,m=!!g&&(t.executable===true||t.executableInCurrentEnvironment===true),A=Q({strategy:t.strategy,includeAbsolutePaths:e.includeAbsolutePaths}),I=f(t.transaction),C=I?.schemaVersion==="workspai.doctor-dependency-repair-transaction.v1"?structuredClone(I):void 0;return C&&(C.projectPath=a),[v({id:`doctor.${n}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof s?.title=="string"&&s.title.trim()?s.title.trim():`Repair ${d}`,order:e.startOrder+o,phase:typeof t.phase=="string"?t.phase:"doctor-remediation",blocker:typeof s?.summary=="string"&&s.summary.trim()?s.summary.trim():`Doctor remediation is pending for ${d}.`,summary:typeof s?.summary=="string"&&s.summary.trim()?s.summary.trim():`Execute the CLI-authored Doctor step for ${d}.`,mode:m?"run-command":"manual-guidance",risk:b,status:k,...m&&g?{command:g}:{},...m&&u?{invocation:u}:{},...R?{operation:R}:{},verifyCommand:typeof t.verifyCommand=="string"&&t.verifyCommand.trim()?t.verifyCommand.trim():"npx workspai doctor project --json",files:w(t.files).map($=>Z({workspacePath:e.workspacePath,projectPath:c,projectName:d,filePath:$,includeAbsolutePaths:e.includeAbsolutePaths})).filter($=>!!$),notes:[`Source Doctor step: ${n}`,`Doctor finding id: ${j}`,`Doctor finding status: ${h}`,...typeof p?.reason=="string"?[p.reason]:[]],scope:"project",projectName:d,projectPath:a,sourceStepId:n,findingId:j,findingStatus:h,causalKey:x,dependsOn:w(t.dependsOn).map($=>`doctor.${$}`),strategy:A,transaction:C,cwd:"project",...f(t.rollback)?.available===true?{rollback:{available:true,strategy:"manual"}}:{}})]})}function H(e){let i=typeof e.capability.command=="string"?e.capability.command.trim():"";if(e.includeAbsolutePaths&&i)return i;let r=E({operation:e.capability.operation,absoluteProjectPath:e.absoluteProjectPath});if(r)return b$2(r);let o=f(e.capability.invocation),t=typeof o?.executable=="string"?o.executable.trim():"",n=M(t,w(o?.args));if(t)return [t,...n].map(c=>/^[a-zA-Z0-9_./:@=+-]+$/.test(c)?c:JSON.stringify(c)).join(" ");if(!i)return;let d=e.absoluteProjectPath.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return i.replace(new RegExp(`^cd\\s+["']?${d}["']?\\s*&&\\s*`,"i"),"").replaceAll(e.absoluteProjectPath,".")}function X(e){let i=f(e.capability.invocation),r=typeof i?.executable=="string"?i.executable.trim():"",o=w(i?.args);if(!(!r||o.length!==(Array.isArray(i?.args)?i.args.length:0)))return {cwd:e.includeAbsolutePaths?e.absoluteProjectPath:".",executable:r,args:M(r,o)}}function E(e){let i=f(e.operation);if(!i||typeof i.type!="string")return;let r=structuredClone(i);for(let o of ["path","sourcePath"]){let t=r[o];if(typeof t!="string")continue;let n=y.isAbsolute(t)?y.relative(e.absoluteProjectPath,t):t;if(!n||n===".."||n.startsWith(`..${y.sep}`)||y.isAbsolute(n))return;r[o]=n.split(y.sep).join("/");}return r}function Q(e){if(!Array.isArray(e.strategy))return;let i=structuredClone(e.strategy);if(!e.includeAbsolutePaths)for(let r of i)r.invocation&&(r.invocation.cwd=".");return i}function me(e){let i=Array.isArray(e.report.payload.projects)?e.report.payload.projects:e.report.payload.project?[e.report.payload.project]:[],r=new Set,o=[];for(let t of i){let n=f(t);if(!n)continue;let d=typeof n.name=="string"?n.name.trim():"",c=typeof n.path=="string"?n.path.trim():"";if(!d||!c)continue;let l=Array.isArray(n.repairCapabilities)?n.repairCapabilities:Array.isArray(n.probes)?n.probes.map(s=>f(s)?.repairCapability).filter(s=>s!==void 0):[],p=new Map,k=new Map,b=f(n.diagnosis);for(let s of Array.isArray(b?.findings)?b.findings:[]){let a=f(s),g=f(a?.repair),u=typeof g?.capabilityId=="string"?g.capabilityId.trim():"",R=typeof a?.id=="string"?a.id.trim():"",h=typeof a?.causalKey=="string"?a.causalKey.trim():"",j=a?.status==="blocking"||a?.status==="advisory"||a?.status==="informational"||a?.status==="unknown"?a.status:"unknown";u&&R&&h&&k.set(u,{findingId:R,causalKey:h,findingStatus:j});}for(let s of Array.isArray(n.probes)?n.probes:[]){let a=f(s),g=f(a?.repairCapability),u=typeof g?.id=="string"?g.id.trim():"";u&&p.set(u,a?.status==="fail"?"blocking":"advisory");}for(let s of l){let a=f(s),g=typeof a?.id=="string"?a.id.trim():"";if(!a||!g)continue;let u=`${d}:${g}`;if(r.has(u))continue;r.add(u);let R=a.risk==="safe"||a.risk==="guarded"||a.risk==="invasive"?a.risk:"guarded",h=H({capability:a,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),j=X({capability:a,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),x=E({operation:a.operation,absoluteProjectPath:c}),m=a.status==="available"&&!!h,A=f(a.transaction),I=A?.schemaVersion==="workspai.doctor-dependency-repair-transaction.v1"?structuredClone(A):void 0,C=k.get(g),$=C?.findingStatus??p.get(g)??(I?"blocking":"advisory");I&&(I.projectPath=D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}));let ee=Q({strategy:a.strategy,includeAbsolutePaths:e.includeAbsolutePaths}),te=w(a.files).map(S=>Z({workspacePath:e.workspacePath,projectPath:c,projectName:d,filePath:S,includeAbsolutePaths:e.includeAbsolutePaths})).filter(S=>!!S),W=v({id:`doctor.${d}.${g}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof a.title=="string"&&a.title.trim()?a.title.trim():`Repair ${d}`,order:e.startOrder+o.length,phase:I?"dependency-remediation":"doctor-remediation",blocker:typeof a.reason=="string"&&a.reason.trim()?a.reason.trim():`Doctor remediation is pending for ${d}.`,summary:typeof a.reason=="string"&&a.reason.trim()?a.reason.trim():`Execute the Doctor-authored repair capability for ${d}.`,mode:m?a.canEditFiles===true?"edit-file":"run-command":"manual-guidance",risk:R,status:m?"ready":a.status==="manual"?"guidance-only":"blocked",...h?{command:h}:{},...j?{invocation:j}:{},verifyCommand:typeof a.verifyCommand=="string"&&a.verifyCommand.trim()?a.verifyCommand.trim():"npx workspai doctor project --json",files:te,notes:[`Source Doctor capability: ${g}`,`Doctor finding status: ${$}`,...w(a.limitations)],scope:"project",projectName:d,projectPath:D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}),sourceStepId:g,findingId:C?.findingId??(typeof a.issueId=="string"&&a.issueId.trim()?a.issueId.trim():g),findingStatus:$,causalKey:C?.causalKey,strategy:ee,transaction:I,cwd:"project",...x?{operation:x,rollback:{available:true,strategy:"manual"}}:{}}),O=h?o.findIndex(S=>S.projectName===d&&S.command===h&&S.cwd==="project"):-1;if(O>=0){o[O]=ne({existing:o[O],incoming:W});continue}o.push(W);}}return o}function ue(e){let i=[],r=se("npx workspai bootstrap --json");for(let o of e.blockers)o.includes("profile.enterprise.ci")&&i.push(v({id:"bootstrap.enterprise-ci",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Run bootstrap in deterministic CI mode",order:10,phase:"bootstrap-preflight",blocker:o,summary:"Enterprise bootstrap compliance requires --ci for deterministic execution.",mode:"run-command",risk:"safe",command:r,verifyCommand:r})),o.includes("profile.enterprise.compatibility-matrix")&&i.push(v({id:"bootstrap.compatibility-matrix",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise compatibility matrix baseline",order:20,phase:"bootstrap-config",blocker:o,summary:"Create the missing compatibility matrix baseline without overwriting user data.",mode:"edit-file",risk:"safe",verifyCommand:r,files:[t.compatibilityMatrix],operation:{type:"file-create",path:t.compatibilityMatrix,content:ce(e.generatedAt),overwrite:false}})),o.includes("profile.enterprise.mirror-config")&&i.push(v({id:"bootstrap.mirror-config",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise mirror config baseline",order:30,phase:"bootstrap-config",blocker:o,summary:"Create the missing mirror configuration baseline without enabling mirroring.",mode:"edit-file",risk:"safe",verifyCommand:r,files:[".workspai/mirror-config.json"],operation:{type:"file-create",path:".workspai/mirror-config.json",content:de(e.generatedAt),overwrite:false}}));return i}function fe(e){let i=Array.isArray(e.report.payload.steps)?e.report.payload.steps:[],r=[],o=new Map;for(let t of i){let n=f(t),d=f(n?.command),c=typeof n?.id=="string"?n.id.trim():"",l=typeof n?.project=="string"?n.project.trim():"",p=typeof n?.status=="string"?n.status:"",k=typeof d?.display=="string"?d.display.trim():"",b=n?.required===true;if(!c.startsWith("project.")||!l||!b||p!=="fail"&&p!=="missing"||!/^npx\s+workspai\s+workspace\s+run\s+/i.test(k))continue;let s=c.split(".").at(-1)??"stage",a=`workspaceVerify.${c}`,g=o.get(l),u=/(?:^|\s)--no-gates(?:\s|$)/.test(k)?k:`${k} --no-gates`;r.push(v({id:a,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof n.label=="string"&&n.label.trim()?n.label.trim():`Run ${s} for ${l}`,order:e.startOrder+r.length,phase:"fleet-run",blocker:typeof n.message=="string"&&n.message.trim()?n.message.trim():`${s} evidence is not current for ${l}.`,summary:`Produce fresh ${s} evidence for ${l} without re-entering the blocked aggregate gates.`,mode:"run-command",risk:s==="start"?"guarded":"safe",status:"ready",command:u,verifyCommand:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",scope:"project",projectName:l,projectPath:l,sourceStepId:c,...g?{dependsOn:[g]}:{},cwd:"workspace",notes:[`Source Workspace Verify step: ${c}`,"Aggregate verification must run only after this project evidence producer completes."]})),o.set(l,a);}return r}var T={python:["python3","python","py"],node:["node"],go:["go"],java:["java"],dotnet:["dotnet"],rust:["cargo"],php:["php"]};async function ge(e,i,r){for(let o of T[e]??[e])if(r?await r(o,i):await a$2({executable:o,cwd:i}))return o}async function ye(e){let i=P(e.blockers.flatMap(o=>{let t=o.match(/(?:project runtimes?|workspace)\s*\(([^)]+)\)\s+(?:is|are) not pinned/i);return t?.[1]?t[1].split(",").map(n=>n.trim().toLowerCase()).filter(n=>/^(python|node|go|java|dotnet|rust|php)$/.test(n)):[]})),r=[];for(let o of i){let t=T[o]??[o],n=await ge(o,e.workspacePath,e.toolAvailable),d=`environment.runtime.${o}`,c=`readiness.toolchain.${o}.setup`,l=e.blockers.find(p=>p.toLowerCase().includes(`(${o})`))??`The ${o} runtime is not pinned in the canonical workspace toolchain.`;n||r.push(v({id:d,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Provide the ${o} host runtime`,order:e.startOrder+r.length,phase:"host-prerequisite",blocker:`No launchable ${o} runtime is available in the current environment.`,summary:`Install or configure ${t.join(" or ")} outside Workspai, then refresh the remediation plan.`,mode:"manual-guidance",risk:"safe",status:"guidance-only",verifyCommand:`npx workspai setup ${o} --json`,requirements:[{kind:"executable",id:`executable:${o}`,status:"missing",executable:t.join("|"),message:`A launchable ${t.join(" or ")} executable must be visible to Workspai.`}],retryPolicy:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["`workspai setup` detects and pins an existing runtime; it does not install host software."]})),r.push(v({id:c,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Pin ${o} in the workspace toolchain`,order:e.startOrder+r.length,phase:"toolchain-reconciliation",blocker:l,summary:`Detect and persist the current ${o} runtime in the canonical workspace toolchain lock.`,mode:"run-command",risk:"safe",status:n?"ready":"blocked",command:`npx workspai setup ${o} --json`,invocation:U(["setup",o,"--json"]),verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",dependsOn:n?void 0:[d],requirements:[{kind:"executable",id:`executable:${o}`,status:n?"satisfied":"missing",executable:n??t.join("|"),message:n?`Runtime prerequisite is launchable: ${n}.`:`Runtime prerequisite is unavailable: ${t.join(" or ")}.`},...n?[]:[{kind:"action",id:`action:${d}`,status:"pending",actionId:d,message:"The host runtime prerequisite must be resolved first."}]],retryPolicy:n?{sameGeneration:"allowed",resumeWhen:"immediate"}:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["Run from the workspace root so the canonical toolchain.lock is updated."]})),r.push(v({id:`readiness.toolchain.${o}.bootstrap`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Reconcile the ${o} workspace foundation`,order:e.startOrder+r.length,phase:"toolchain-reconciliation",blocker:`The ${o} runtime pin must be reconciled with the workspace foundation.`,summary:"Refresh the workspace foundation after the runtime pin is written.",mode:"run-command",risk:"guarded",status:n?"ready":"blocked",command:"npx workspai bootstrap --ci --json",invocation:U(["bootstrap","--ci","--json"]),verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",dependsOn:[c],requirements:[{kind:"action",id:`action:${c}`,status:"pending",actionId:c,message:`The ${o} toolchain pin must complete first.`}],retryPolicy:{sameGeneration:n?"allowed":"forbidden",resumeWhen:n?"dependencies-complete":"environment-changed"}}));}return r}function be(e){if(e.report.artifactKind==="readiness"&&/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(e.blocker))return v({id:`${e.report.cardId}.doctor-owner.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:"Resolve dependency vulnerability through Doctor",order:e.order,phase:"dependency-remediation",blocker:e.blocker,summary:"Release Readiness is the aggregate gate; use the project-scoped Doctor remediation capability that owns this dependency failure.",mode:"verify-before-fix",risk:"guarded",status:"review-required",command:"npx workspai doctor workspace --plan --json",verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",notes:["Read doctor-remediation-plan-last-run.json and execute the matching surface-security-hygiene capability before rerunning Readiness.","Do not treat a Readiness refresh as remediation for a source dependency vulnerability."]});let r={analyze:{title:"Refresh analyze evidence",phase:"analysis",command:"npx workspai analyze --strict --json",verify:"npx workspai analyze --strict --json"},readiness:{title:"Refresh release readiness",phase:"release-readiness",command:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",verify:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json"},pipeline:{title:"Rerun governance pipeline",phase:"governance-pipeline",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"},"workspace-run":{title:"Rerun failed workspace stage",phase:"fleet-run",command:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json",verify:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json"},"workspace-verify":{title:"Refresh workspace verify gate",phase:"verification",command:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",verify:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json"},"doctor-workspace":{title:"Use Doctor remediation plan",phase:"doctor-remediation",command:"npx workspai doctor workspace --plan --json",verify:"npx workspai doctor workspace --json"}}[e.report.artifactKind]??{title:"Refresh artifact evidence",phase:"evidence-refresh",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"};return v({id:`${e.report.cardId}.refresh.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:r.title,order:e.order,phase:r.phase,blocker:e.blocker,summary:"No deterministic file operation is available for this artifact yet; refresh the evidence and continue with the card-specific plan.",mode:e.report.artifactKind==="doctor-workspace"?"verify-before-fix":"run-command",risk:"guarded",status:e.report.artifactKind==="doctor-workspace"?"review-required":"ready",command:r.command,verifyCommand:r.verify,notes:e.report.artifactKind==="doctor-workspace"?["Read doctor-remediation-plan-last-run.json for ordered file-level steps."]:[]})}function Y(e){let i=e.transaction?.ecosystem.toLowerCase(),r=y.basename(e.invocation?.executable??"").toLowerCase(),o=`${i??""}:${r}`;if(/(^|:)(python|pip|pip3|poetry|uv)(:|$)/.test(o))return "python";if(/(^|:)(node|npm|pnpm|yarn|bun)(:|$)/.test(o))return "node";if(/(^|:)(go)(:|$)/.test(o))return "go";if(/(^|:)(java|maven|mvn|mvnw|gradle|gradlew)(:|$)/.test(o))return "java";if(/(^|:)(dotnet|nuget)(:|$)/.test(o))return "dotnet";if(/(^|:)(rust|cargo|rustc)(:|$)/.test(o))return "rust";if(/(^|:)(php|composer)(:|$)/.test(o))return "php"}function he(e,i){let r=i.invocation?.cwd??e;return y.isAbsolute(r)?r:y.resolve(e,r)}function ke(e,i){let r=Y(e);if(r&&T[r]?.includes(y.basename(i)))return `environment.runtime.${r}`;let o=(e.projectName??"workspace").replace(/[^a-zA-Z0-9.-]+/g,"-"),t=y.basename(i).replace(/[^a-zA-Z0-9.-]+/g,"-");return `environment.executable.${o}.${t}`}async function Ae(e){let i=new Map,r=new Map(e.actions.map(t=>[t.id,t]));for(let t of e.actions){if(!t.invocation||t.status==="guidance-only")continue;let n=he(e.workspacePath,t),d=e.toolAvailable?await e.toolAvailable(t.invocation.executable,n):await a$2({executable:t.invocation.executable,cwd:n}),c={kind:"executable",id:`executable:${t.invocation.executable}`,status:d?"satisfied":"missing",executable:t.invocation.executable,message:d?`Required executable is launchable: ${t.invocation.executable}.`:`Required executable is unavailable: ${t.invocation.executable}.`};if(t.requirements=[...(t.requirements??[]).filter(p=>p.id!==c.id),c],d)continue;let l=ke(t,t.invocation.executable);!r.has(l)&&!i.has(l)&&i.set(l,v({id:l,artifactKind:t.artifactKind,cardId:"environment",title:`Provide ${y.basename(t.invocation.executable)}`,order:0,phase:"host-prerequisite",blocker:`The required executable ${t.invocation.executable} is unavailable.`,summary:"Install or configure the required executable outside Workspai, then refresh the plan.",mode:"manual-guidance",risk:"safe",status:"guidance-only",verifyCommand:t.verifyCommand,scope:t.scope,projectName:t.projectName,projectPath:t.projectPath,requirements:[c],retryPolicy:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["The CLI does not install host runtimes or system package managers implicitly."]})),t.status="blocked",t.dependsOn=P([...t.dependsOn??[],l]),t.requirements.push({kind:"action",id:`action:${l}`,status:"pending",actionId:l,message:"Resolve the executable prerequisite and generate fresh evidence first."}),t.retryPolicy={sameGeneration:"forbidden",resumeWhen:"environment-changed"},t.notes.push("This action is not eligible in the current plan generation because its executable precondition failed.");}let o=[...i.values(),...e.actions];return o.forEach((t,n)=>{t.order=n+1;}),o}function we(e){let i=new Set(e.map(r=>r.id));for(let r of e){if(!r.transaction)continue;let o=Y(r);if(!o)continue;let t=`readiness.toolchain.${o}.bootstrap`;i.has(t)&&(r.dependsOn=P([...r.dependsOn??[],t]),r.requirements=[...r.requirements??[],{kind:"action",id:`action:${t}`,status:"pending",actionId:t,message:`The canonical ${o} workspace foundation must be reconciled first.`}],r.status==="ready"&&(r.retryPolicy={sameGeneration:"allowed",resumeWhen:"dependencies-complete"}));}}function ve(e){let i=e.filter(t=>t.status==="ready"&&(t.dependsOn?.length??0)===0).map(t=>t.id),r=e.filter(t=>t.status==="blocked").map(t=>t.id),o=e.find(t=>t.status==="guidance-only")?.id??null;return {nextActionId:i[0]??o,eligibleActionIds:i,blockedActionIds:r}}async function Re(e$1){let i=[a(e$1,".workspai/reports"),e(e$1,".workspai/reports")],r=[],o=new Set;for(let t of oe)for(let n of t.fileNames){let d=(await Promise.all(i.map(c=>y.join(c,n)))).find(c=>existsSync(c));if(!(!d||o.has(`${t.artifactKind}:${n}`))){o.add(`${t.artifactKind}:${n}`);try{let c=await ie.readJSON(d),l=f(c);if(!l)continue;r.push({artifactKind:t.artifactKind,cardId:t.cardId,fileName:n,absolutePath:d,payload:l});break}catch{r.push({artifactKind:t.artifactKind,cardId:t.cardId,fileName:n,absolutePath:d,payload:{blockers:[`${t.artifactKind}: report exists but could not be parsed.`]}});break}}}return r}async function Me(e){let i=y.resolve(e.workspacePath),r=e.includeAbsolutePaths===true,o=e.ciMode===true,t=new Date().toISOString(),n=a(i,".workspai/reports"),d=await Re(i),c=[],l=1;for(let s of d){if(s.artifactKind==="doctor-workspace"){let m=Array.isArray(s.payload.steps)?pe({report:s,workspacePath:i,includeAbsolutePaths:r,startOrder:l}):me({report:s,workspacePath:i,includeAbsolutePaths:r,startOrder:l});c.push(...m),l+=m.length;continue}let a=le(s);if(a.length===0)continue;if(s.artifactKind==="bootstrap-compliance"){c.push(...ue({blockers:a,generatedAt:t})),l=c.length+1;continue}if(s.artifactKind==="workspace-verify"){let m=fe({report:s,startOrder:l,ciMode:o});if(m.length>0){c.push(...m),l+=m.length;continue}}if(s.artifactKind==="readiness"){let m=await ye({report:s,blockers:a,startOrder:l,ciMode:o,workspacePath:i,toolAvailable:e.toolAvailable});if(m.length>0){c.push(...m),l+=m.length;continue}}let g=c.some(m=>m.transaction?.kind==="dependency-security"),u=s.artifactKind==="readiness"&&a.some(m=>/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(m));if(g&&u)continue;let R=a[0],h=be({report:s,blocker:R,order:l,ciMode:o}),x={readiness:new Set(["bootstrap","doctor"]),pipeline:new Set(["bootstrap","doctor","analyze","readiness"]),workspaceVerify:new Set(["bootstrap","doctor","readiness","workspaceRun"])}[s.cardId];if(s.cardId==="pipeline"){let m=["doctor","analyze","readiness"].find(A=>R.toLowerCase().includes(A));m&&(x=new Set([m]));}if(x){let m=c.filter(A=>x.has(A.cardId)&&A.risk!=="invasive"&&A.status!=="blocked"&&A.status!=="guidance-only").map(A=>A.id);m.length>0&&(h.dependsOn=P([...h.dependsOn??[],...m]),h.notes.push("This aggregate gate must run after its contract-owned upstream remediation actions."));}a.length>1&&h.notes.push(...a.slice(1,8).map(m=>`Related blocker: ${m}`)),c.push(h),l+=1;}we(c);let p=await Ae({actions:c,workspacePath:i,toolAvailable:e.toolAvailable}),k=ve(p),b$1={safe:p.filter(s=>s.risk==="safe").length,guarded:p.filter(s=>s.risk==="guarded").length,invasive:p.filter(s=>s.risk==="invasive").length};return {schemaVersion:a$1,generatedAt:t,workspace:{name:await b(i),...r?{path:i}:{}},source:{command:"workspace remediation-plan",reportsDir:ae(i,n,r),includeAbsolutePaths:r,ciMode:o},summary:{artifactsScanned:d.length,cardsCovered:P(p.map(s=>s.cardId)).length,totalActions:p.length,executableActions:p.filter(s=>s.status==="ready").length,blockedActions:p.filter(s=>s.status==="blocked").length,guidanceActions:p.filter(s=>s.status==="guidance-only").length,risk:b$1},execution:k,actions:p}}async function Ee(e,i){return h(i,t.artifactRemediationPlan,e)}export{Me as a,Ee as b};
+`}function le(e){let i=e.payload,r=w(i.blockers),o=w(i.blockingReasons),t=w(i.failures),n=w(i.reasons),d=w(i.policyViolations),c=f(i.summary),l=w(c?.blockers);if(e.artifactKind==="analyze"){let k=(Array.isArray(i.findings)?i.findings:[]).map(b=>f(b)).filter(b=>!!b).map(b=>String(b.message??b.title??b.id??"").trim()).filter(Boolean);return P([...r,...k,...o])}if(e.artifactKind==="workspace-run"){let p=f(i.stages),k=Object.entries(p??{}).flatMap(([b,s])=>{let a=f(s);return (Array.isArray(a?.projects)?a.projects:[]).map(u=>f(u)).filter(u=>!!u).filter(u=>u.status==="failed"||u.ok===false).map(u=>`${b}: ${String(u.project??u.name??"project")} failed`)});return P([...r,...k,...o])}return P([...r,...o,...t,...n,...d,...l])}function v(e){let i=e.findingId?.trim()||e.sourceStepId?.trim()||e.id,r=e.findingStatus??"blocking",o=e.causalKey?.trim()||[e.cardId,e.projectName??e.scope??"workspace",i].map(t=>String(t).trim().toLowerCase()).join(":");return {id:e.id,artifactKind:e.artifactKind,cardId:e.cardId,title:e.title,order:e.order,phase:e.phase,scope:e.scope??"workspace",...e.projectName?{projectName:e.projectName}:{},...e.projectPath?{projectPath:e.projectPath}:{},...e.sourceStepId?{sourceStepId:e.sourceStepId}:{},findingId:i,findingStatus:r,causalKey:o,...e.dependsOn?{dependsOn:e.dependsOn}:{},...e.strategy?{strategy:structuredClone(e.strategy)}:{},...e.transaction?{transaction:structuredClone(e.transaction)}:{},...e.requirements?{requirements:structuredClone(e.requirements)}:{},...e.retryPolicy?{retryPolicy:structuredClone(e.retryPolicy)}:{},status:e.status??"ready",mode:e.mode,risk:e.risk,requiresApproval:true,blocker:e.blocker,summary:e.summary,...e.command?{command:e.command}:{},...e.invocation?{invocation:structuredClone(e.invocation)}:{},verifyCommand:e.verifyCommand,cwd:e.cwd??"workspace",files:e.files??[],...e.operation?{operation:e.operation}:{},rollback:e.rollback??(e.operation?{available:true,strategy:"idempotent"}:{available:false,strategy:"none"}),notes:e.notes??[]}}function pe(e){return (Array.isArray(e.report.payload.steps)?e.report.payload.steps:[]).flatMap((r,o)=>{let t=f(r),n=typeof t?.id=="string"?t.id.trim():"",d=typeof t?.projectName=="string"?t.projectName.trim():"",c=typeof t?.projectPath=="string"?t.projectPath.trim():"",l=typeof t?.originalCommand=="string"?t.originalCommand.trim():"";if(!t||!n||!d||!c)return [];let p=f(t.studioStatus),k=p?.state==="ready"||p?.state==="review-required"||p?.state==="blocked"||p?.state==="guidance-only"?p.state:"guidance-only",b=t.risk==="safe"||t.risk==="guarded"||t.risk==="invasive"?t.risk:"guarded",s=f(t.preview),a=D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}),g=H({capability:{...t,command:l},absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),u=X({capability:t,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),R=E({operation:t.operation,absoluteProjectPath:c}),h=t.findingStatus==="blocking"||t.findingStatus==="advisory"||t.findingStatus==="informational"?t.findingStatus:"unknown",j=typeof t.diagnosisFindingId=="string"&&t.diagnosisFindingId.trim()?t.diagnosisFindingId.trim():typeof t.issueId=="string"&&t.issueId.trim()?t.issueId.trim():n,x=typeof t.causalKey=="string"&&t.causalKey.trim()?t.causalKey.trim():void 0,m=!!g&&(t.executable===true||t.executableInCurrentEnvironment===true),A=Q({strategy:t.strategy,includeAbsolutePaths:e.includeAbsolutePaths}),I=f(t.transaction),C=I?.schemaVersion==="workspai.doctor-dependency-repair-transaction.v1"?structuredClone(I):void 0;return C&&(C.projectPath=a),[v({id:`doctor.${n}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof s?.title=="string"&&s.title.trim()?s.title.trim():`Repair ${d}`,order:e.startOrder+o,phase:typeof t.phase=="string"?t.phase:"doctor-remediation",blocker:typeof s?.summary=="string"&&s.summary.trim()?s.summary.trim():`Doctor remediation is pending for ${d}.`,summary:typeof s?.summary=="string"&&s.summary.trim()?s.summary.trim():`Execute the CLI-authored Doctor step for ${d}.`,mode:m?"run-command":"manual-guidance",risk:b,status:k,...m&&g?{command:g}:{},...m&&u?{invocation:u}:{},...R?{operation:R}:{},verifyCommand:typeof t.verifyCommand=="string"&&t.verifyCommand.trim()?t.verifyCommand.trim():"npx workspai doctor project --json",files:w(t.files).map($=>Z({workspacePath:e.workspacePath,projectPath:c,projectName:d,filePath:$,includeAbsolutePaths:e.includeAbsolutePaths})).filter($=>!!$),notes:[`Source Doctor step: ${n}`,`Doctor finding id: ${j}`,`Doctor finding status: ${h}`,...typeof p?.reason=="string"?[p.reason]:[]],scope:"project",projectName:d,projectPath:a,sourceStepId:n,findingId:j,findingStatus:h,causalKey:x,dependsOn:w(t.dependsOn).map($=>`doctor.${$}`),strategy:A,transaction:C,cwd:"project",...f(t.rollback)?.available===true?{rollback:{available:true,strategy:"manual"}}:{}})]})}function H(e){let i=typeof e.capability.command=="string"?e.capability.command.trim():"";if(e.includeAbsolutePaths&&i)return i;let r=E({operation:e.capability.operation,absoluteProjectPath:e.absoluteProjectPath});if(r)return b$1(r);let o=f(e.capability.invocation),t=typeof o?.executable=="string"?o.executable.trim():"",n=M(t,w(o?.args));if(t)return [t,...n].map(c=>/^[a-zA-Z0-9_./:@=+-]+$/.test(c)?c:JSON.stringify(c)).join(" ");if(!i)return;let d=e.absoluteProjectPath.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return i.replace(new RegExp(`^cd\\s+["']?${d}["']?\\s*&&\\s*`,"i"),"").replaceAll(e.absoluteProjectPath,".")}function X(e){let i=f(e.capability.invocation),r=typeof i?.executable=="string"?i.executable.trim():"",o=w(i?.args);if(!(!r||o.length!==(Array.isArray(i?.args)?i.args.length:0)))return {cwd:e.includeAbsolutePaths?e.absoluteProjectPath:".",executable:r,args:M(r,o)}}function E(e){let i=f(e.operation);if(!i||typeof i.type!="string")return;let r=structuredClone(i);for(let o of ["path","sourcePath"]){let t=r[o];if(typeof t!="string")continue;let n=y.isAbsolute(t)?y.relative(e.absoluteProjectPath,t):t;if(!n||n===".."||n.startsWith(`..${y.sep}`)||y.isAbsolute(n))return;r[o]=n.split(y.sep).join("/");}return r}function Q(e){if(!Array.isArray(e.strategy))return;let i=structuredClone(e.strategy);if(!e.includeAbsolutePaths)for(let r of i)r.invocation&&(r.invocation.cwd=".");return i}function me(e){let i=Array.isArray(e.report.payload.projects)?e.report.payload.projects:e.report.payload.project?[e.report.payload.project]:[],r=new Set,o=[];for(let t of i){let n=f(t);if(!n)continue;let d=typeof n.name=="string"?n.name.trim():"",c=typeof n.path=="string"?n.path.trim():"";if(!d||!c)continue;let l=Array.isArray(n.repairCapabilities)?n.repairCapabilities:Array.isArray(n.probes)?n.probes.map(s=>f(s)?.repairCapability).filter(s=>s!==void 0):[],p=new Map,k=new Map,b=f(n.diagnosis);for(let s of Array.isArray(b?.findings)?b.findings:[]){let a=f(s),g=f(a?.repair),u=typeof g?.capabilityId=="string"?g.capabilityId.trim():"",R=typeof a?.id=="string"?a.id.trim():"",h=typeof a?.causalKey=="string"?a.causalKey.trim():"",j=a?.status==="blocking"||a?.status==="advisory"||a?.status==="informational"||a?.status==="unknown"?a.status:"unknown";u&&R&&h&&k.set(u,{findingId:R,causalKey:h,findingStatus:j});}for(let s of Array.isArray(n.probes)?n.probes:[]){let a=f(s),g=f(a?.repairCapability),u=typeof g?.id=="string"?g.id.trim():"";u&&p.set(u,a?.status==="fail"?"blocking":"advisory");}for(let s of l){let a=f(s),g=typeof a?.id=="string"?a.id.trim():"";if(!a||!g)continue;let u=`${d}:${g}`;if(r.has(u))continue;r.add(u);let R=a.risk==="safe"||a.risk==="guarded"||a.risk==="invasive"?a.risk:"guarded",h=H({capability:a,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),j=X({capability:a,absoluteProjectPath:c,includeAbsolutePaths:e.includeAbsolutePaths}),x=E({operation:a.operation,absoluteProjectPath:c}),m=a.status==="available"&&!!h,A=f(a.transaction),I=A?.schemaVersion==="workspai.doctor-dependency-repair-transaction.v1"?structuredClone(A):void 0,C=k.get(g),$=C?.findingStatus??p.get(g)??(I?"blocking":"advisory");I&&(I.projectPath=D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}));let ee=Q({strategy:a.strategy,includeAbsolutePaths:e.includeAbsolutePaths}),te=w(a.files).map(S=>Z({workspacePath:e.workspacePath,projectPath:c,projectName:d,filePath:S,includeAbsolutePaths:e.includeAbsolutePaths})).filter(S=>!!S),W=v({id:`doctor.${d}.${g}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof a.title=="string"&&a.title.trim()?a.title.trim():`Repair ${d}`,order:e.startOrder+o.length,phase:I?"dependency-remediation":"doctor-remediation",blocker:typeof a.reason=="string"&&a.reason.trim()?a.reason.trim():`Doctor remediation is pending for ${d}.`,summary:typeof a.reason=="string"&&a.reason.trim()?a.reason.trim():`Execute the Doctor-authored repair capability for ${d}.`,mode:m?a.canEditFiles===true?"edit-file":"run-command":"manual-guidance",risk:R,status:m?"ready":a.status==="manual"?"guidance-only":"blocked",...h?{command:h}:{},...j?{invocation:j}:{},verifyCommand:typeof a.verifyCommand=="string"&&a.verifyCommand.trim()?a.verifyCommand.trim():"npx workspai doctor project --json",files:te,notes:[`Source Doctor capability: ${g}`,`Doctor finding status: ${$}`,...w(a.limitations)],scope:"project",projectName:d,projectPath:D({workspacePath:e.workspacePath,projectPath:c,projectName:d,includeAbsolutePaths:e.includeAbsolutePaths}),sourceStepId:g,findingId:C?.findingId??(typeof a.issueId=="string"&&a.issueId.trim()?a.issueId.trim():g),findingStatus:$,causalKey:C?.causalKey,strategy:ee,transaction:I,cwd:"project",...x?{operation:x,rollback:{available:true,strategy:"manual"}}:{}}),O=h?o.findIndex(S=>S.projectName===d&&S.command===h&&S.cwd==="project"):-1;if(O>=0){o[O]=ne({existing:o[O],incoming:W});continue}o.push(W);}}return o}function ue(e){let i=[],r=se("npx workspai bootstrap --json");for(let o of e.blockers)o.includes("profile.enterprise.ci")&&i.push(v({id:"bootstrap.enterprise-ci",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Run bootstrap in deterministic CI mode",order:10,phase:"bootstrap-preflight",blocker:o,summary:"Enterprise bootstrap compliance requires --ci for deterministic execution.",mode:"run-command",risk:"safe",command:r,verifyCommand:r})),o.includes("profile.enterprise.compatibility-matrix")&&i.push(v({id:"bootstrap.compatibility-matrix",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise compatibility matrix baseline",order:20,phase:"bootstrap-config",blocker:o,summary:"Create the missing compatibility matrix baseline without overwriting user data.",mode:"edit-file",risk:"safe",verifyCommand:r,files:[t.compatibilityMatrix],operation:{type:"file-create",path:t.compatibilityMatrix,content:ce(e.generatedAt),overwrite:false}})),o.includes("profile.enterprise.mirror-config")&&i.push(v({id:"bootstrap.mirror-config",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise mirror config baseline",order:30,phase:"bootstrap-config",blocker:o,summary:"Create the missing mirror configuration baseline without enabling mirroring.",mode:"edit-file",risk:"safe",verifyCommand:r,files:[".workspai/mirror-config.json"],operation:{type:"file-create",path:".workspai/mirror-config.json",content:de(e.generatedAt),overwrite:false}}));return i}function fe(e){let i=Array.isArray(e.report.payload.steps)?e.report.payload.steps:[],r=[],o=new Map;for(let t of i){let n=f(t),d=f(n?.command),c=typeof n?.id=="string"?n.id.trim():"",l=typeof n?.project=="string"?n.project.trim():"",p=typeof n?.status=="string"?n.status:"",k=typeof d?.display=="string"?d.display.trim():"",b=n?.required===true;if(!c.startsWith("project.")||!l||!b||p!=="fail"&&p!=="missing"||!/^npx\s+workspai\s+workspace\s+run\s+/i.test(k))continue;let s=c.split(".").at(-1)??"stage",a=`workspaceVerify.${c}`,g=o.get(l),u=/(?:^|\s)--no-gates(?:\s|$)/.test(k)?k:`${k} --no-gates`;r.push(v({id:a,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:typeof n.label=="string"&&n.label.trim()?n.label.trim():`Run ${s} for ${l}`,order:e.startOrder+r.length,phase:"fleet-run",blocker:typeof n.message=="string"&&n.message.trim()?n.message.trim():`${s} evidence is not current for ${l}.`,summary:`Produce fresh ${s} evidence for ${l} without re-entering the blocked aggregate gates.`,mode:"run-command",risk:s==="start"?"guarded":"safe",status:"ready",command:u,verifyCommand:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",scope:"project",projectName:l,projectPath:l,sourceStepId:c,...g?{dependsOn:[g]}:{},cwd:"workspace",notes:[`Source Workspace Verify step: ${c}`,"Aggregate verification must run only after this project evidence producer completes."]})),o.set(l,a);}return r}var T={python:["python3","python","py"],node:["node"],go:["go"],java:["java"],dotnet:["dotnet"],rust:["cargo"],php:["php"]};async function ge(e,i,r){for(let o of T[e]??[e])if(r?await r(o,i):await a$2({executable:o,cwd:i}))return o}async function ye(e){let i=P(e.blockers.flatMap(o=>{let t=o.match(/(?:project runtimes?|workspace)\s*\(([^)]+)\)\s+(?:is|are) not pinned/i);return t?.[1]?t[1].split(",").map(n=>n.trim().toLowerCase()).filter(n=>/^(python|node|go|java|dotnet|rust|php)$/.test(n)):[]})),r=[];for(let o of i){let t=T[o]??[o],n=await ge(o,e.workspacePath,e.toolAvailable),d=`environment.runtime.${o}`,c=`readiness.toolchain.${o}.setup`,l=e.blockers.find(p=>p.toLowerCase().includes(`(${o})`))??`The ${o} runtime is not pinned in the canonical workspace toolchain.`;n||r.push(v({id:d,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Provide the ${o} host runtime`,order:e.startOrder+r.length,phase:"host-prerequisite",blocker:`No launchable ${o} runtime is available in the current environment.`,summary:`Install or configure ${t.join(" or ")} outside Workspai, then refresh the remediation plan.`,mode:"manual-guidance",risk:"safe",status:"guidance-only",verifyCommand:`npx workspai setup ${o} --json`,requirements:[{kind:"executable",id:`executable:${o}`,status:"missing",executable:t.join("|"),message:`A launchable ${t.join(" or ")} executable must be visible to Workspai.`}],retryPolicy:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["`workspai setup` detects and pins an existing runtime; it does not install host software."]})),r.push(v({id:c,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Pin ${o} in the workspace toolchain`,order:e.startOrder+r.length,phase:"toolchain-reconciliation",blocker:l,summary:`Detect and persist the current ${o} runtime in the canonical workspace toolchain lock.`,mode:"run-command",risk:"safe",status:n?"ready":"blocked",command:`npx workspai setup ${o} --json`,invocation:U(["setup",o,"--json"]),verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",dependsOn:n?void 0:[d],requirements:[{kind:"executable",id:`executable:${o}`,status:n?"satisfied":"missing",executable:n??t.join("|"),message:n?`Runtime prerequisite is launchable: ${n}.`:`Runtime prerequisite is unavailable: ${t.join(" or ")}.`},...n?[]:[{kind:"action",id:`action:${d}`,status:"pending",actionId:d,message:"The host runtime prerequisite must be resolved first."}]],retryPolicy:n?{sameGeneration:"allowed",resumeWhen:"immediate"}:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["Run from the workspace root so the canonical toolchain.lock is updated."]})),r.push(v({id:`readiness.toolchain.${o}.bootstrap`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:`Reconcile the ${o} workspace foundation`,order:e.startOrder+r.length,phase:"toolchain-reconciliation",blocker:`The ${o} runtime pin must be reconciled with the workspace foundation.`,summary:"Refresh the workspace foundation after the runtime pin is written.",mode:"run-command",risk:"guarded",status:n?"ready":"blocked",command:"npx workspai bootstrap --ci --json",invocation:U(["bootstrap","--ci","--json"]),verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",dependsOn:[c],requirements:[{kind:"action",id:`action:${c}`,status:"pending",actionId:c,message:`The ${o} toolchain pin must complete first.`}],retryPolicy:{sameGeneration:n?"allowed":"forbidden",resumeWhen:n?"dependencies-complete":"environment-changed"}}));}return r}function be(e){if(e.report.artifactKind==="readiness"&&/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(e.blocker))return v({id:`${e.report.cardId}.doctor-owner.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:"Resolve dependency vulnerability through Doctor",order:e.order,phase:"dependency-remediation",blocker:e.blocker,summary:"Release Readiness is the aggregate gate; use the project-scoped Doctor remediation capability that owns this dependency failure.",mode:"verify-before-fix",risk:"guarded",status:"review-required",command:"npx workspai doctor workspace --plan --json",verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",notes:["Read doctor-remediation-plan-last-run.json and execute the matching surface-security-hygiene capability before rerunning Readiness.","Do not treat a Readiness refresh as remediation for a source dependency vulnerability."]});let r={analyze:{title:"Refresh analyze evidence",phase:"analysis",command:"npx workspai analyze --strict --json",verify:"npx workspai analyze --strict --json"},readiness:{title:"Refresh release readiness",phase:"release-readiness",command:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",verify:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json"},pipeline:{title:"Rerun governance pipeline",phase:"governance-pipeline",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"},"workspace-run":{title:"Rerun failed workspace stage",phase:"fleet-run",command:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json",verify:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json"},"workspace-verify":{title:"Refresh workspace verify gate",phase:"verification",command:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",verify:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json"},"doctor-workspace":{title:"Use Doctor remediation plan",phase:"doctor-remediation",command:"npx workspai doctor workspace --plan --json",verify:"npx workspai doctor workspace --json"}}[e.report.artifactKind]??{title:"Refresh artifact evidence",phase:"evidence-refresh",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"};return v({id:`${e.report.cardId}.refresh.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:r.title,order:e.order,phase:r.phase,blocker:e.blocker,summary:"No deterministic file operation is available for this artifact yet; refresh the evidence and continue with the card-specific plan.",mode:e.report.artifactKind==="doctor-workspace"?"verify-before-fix":"run-command",risk:"guarded",status:e.report.artifactKind==="doctor-workspace"?"review-required":"ready",command:r.command,verifyCommand:r.verify,notes:e.report.artifactKind==="doctor-workspace"?["Read doctor-remediation-plan-last-run.json for ordered file-level steps."]:[]})}function Y(e){let i=e.transaction?.ecosystem.toLowerCase(),r=y.basename(e.invocation?.executable??"").toLowerCase(),o=`${i??""}:${r}`;if(/(^|:)(python|pip|pip3|poetry|uv)(:|$)/.test(o))return "python";if(/(^|:)(node|npm|pnpm|yarn|bun)(:|$)/.test(o))return "node";if(/(^|:)(go)(:|$)/.test(o))return "go";if(/(^|:)(java|maven|mvn|mvnw|gradle|gradlew)(:|$)/.test(o))return "java";if(/(^|:)(dotnet|nuget)(:|$)/.test(o))return "dotnet";if(/(^|:)(rust|cargo|rustc)(:|$)/.test(o))return "rust";if(/(^|:)(php|composer)(:|$)/.test(o))return "php"}function he(e,i){let r=i.invocation?.cwd??e;return y.isAbsolute(r)?r:y.resolve(e,r)}function ke(e,i){let r=Y(e);if(r&&T[r]?.includes(y.basename(i)))return `environment.runtime.${r}`;let o=(e.projectName??"workspace").replace(/[^a-zA-Z0-9.-]+/g,"-"),t=y.basename(i).replace(/[^a-zA-Z0-9.-]+/g,"-");return `environment.executable.${o}.${t}`}async function Ae(e){let i=new Map,r=new Map(e.actions.map(t=>[t.id,t]));for(let t of e.actions){if(!t.invocation||t.status==="guidance-only")continue;let n=he(e.workspacePath,t),d=e.toolAvailable?await e.toolAvailable(t.invocation.executable,n):await a$2({executable:t.invocation.executable,cwd:n}),c={kind:"executable",id:`executable:${t.invocation.executable}`,status:d?"satisfied":"missing",executable:t.invocation.executable,message:d?`Required executable is launchable: ${t.invocation.executable}.`:`Required executable is unavailable: ${t.invocation.executable}.`};if(t.requirements=[...(t.requirements??[]).filter(p=>p.id!==c.id),c],d)continue;let l=ke(t,t.invocation.executable);!r.has(l)&&!i.has(l)&&i.set(l,v({id:l,artifactKind:t.artifactKind,cardId:"environment",title:`Provide ${y.basename(t.invocation.executable)}`,order:0,phase:"host-prerequisite",blocker:`The required executable ${t.invocation.executable} is unavailable.`,summary:"Install or configure the required executable outside Workspai, then refresh the plan.",mode:"manual-guidance",risk:"safe",status:"guidance-only",verifyCommand:t.verifyCommand,scope:t.scope,projectName:t.projectName,projectPath:t.projectPath,requirements:[c],retryPolicy:{sameGeneration:"forbidden",resumeWhen:"environment-changed"},notes:["The CLI does not install host runtimes or system package managers implicitly."]})),t.status="blocked",t.dependsOn=P([...t.dependsOn??[],l]),t.requirements.push({kind:"action",id:`action:${l}`,status:"pending",actionId:l,message:"Resolve the executable prerequisite and generate fresh evidence first."}),t.retryPolicy={sameGeneration:"forbidden",resumeWhen:"environment-changed"},t.notes.push("This action is not eligible in the current plan generation because its executable precondition failed.");}let o=[...i.values(),...e.actions];return o.forEach((t,n)=>{t.order=n+1;}),o}function we(e){let i=new Set(e.map(r=>r.id));for(let r of e){if(!r.transaction)continue;let o=Y(r);if(!o)continue;let t=`readiness.toolchain.${o}.bootstrap`;i.has(t)&&(r.dependsOn=P([...r.dependsOn??[],t]),r.requirements=[...r.requirements??[],{kind:"action",id:`action:${t}`,status:"pending",actionId:t,message:`The canonical ${o} workspace foundation must be reconciled first.`}],r.status==="ready"&&(r.retryPolicy={sameGeneration:"allowed",resumeWhen:"dependencies-complete"}));}}function ve(e){let i=e.filter(t=>t.status==="ready"&&(t.dependsOn?.length??0)===0).map(t=>t.id),r=e.filter(t=>t.status==="blocked").map(t=>t.id),o=e.find(t=>t.status==="guidance-only")?.id??null;return {nextActionId:i[0]??o,eligibleActionIds:i,blockedActionIds:r}}async function Re(e$1){let i=[a(e$1,".workspai/reports"),e(e$1,".workspai/reports")],r=[],o=new Set;for(let t of oe)for(let n of t.fileNames){let d=(await Promise.all(i.map(c=>y.join(c,n)))).find(c=>existsSync(c));if(!(!d||o.has(`${t.artifactKind}:${n}`))){o.add(`${t.artifactKind}:${n}`);try{let c=await ie.readJSON(d),l=f(c);if(!l)continue;r.push({artifactKind:t.artifactKind,cardId:t.cardId,fileName:n,absolutePath:d,payload:l});break}catch{r.push({artifactKind:t.artifactKind,cardId:t.cardId,fileName:n,absolutePath:d,payload:{blockers:[`${t.artifactKind}: report exists but could not be parsed.`]}});break}}}return r}async function Me(e){let i=y.resolve(e.workspacePath),r=e.includeAbsolutePaths===true,o=e.ciMode===true,t=new Date().toISOString(),n=a(i,".workspai/reports"),d=await Re(i),c=[],l=1;for(let s of d){if(s.artifactKind==="doctor-workspace"){let m=Array.isArray(s.payload.steps)?pe({report:s,workspacePath:i,includeAbsolutePaths:r,startOrder:l}):me({report:s,workspacePath:i,includeAbsolutePaths:r,startOrder:l});c.push(...m),l+=m.length;continue}let a=le(s);if(a.length===0)continue;if(s.artifactKind==="bootstrap-compliance"){c.push(...ue({blockers:a,generatedAt:t})),l=c.length+1;continue}if(s.artifactKind==="workspace-verify"){let m=fe({report:s,startOrder:l,ciMode:o});if(m.length>0){c.push(...m),l+=m.length;continue}}if(s.artifactKind==="readiness"){let m=await ye({report:s,blockers:a,startOrder:l,ciMode:o,workspacePath:i,toolAvailable:e.toolAvailable});if(m.length>0){c.push(...m),l+=m.length;continue}}let g=c.some(m=>m.transaction?.kind==="dependency-security"),u=s.artifactKind==="readiness"&&a.some(m=>/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(m));if(g&&u)continue;let R=a[0],h=be({report:s,blocker:R,order:l,ciMode:o}),x={readiness:new Set(["bootstrap","doctor"]),pipeline:new Set(["bootstrap","doctor","analyze","readiness"]),workspaceVerify:new Set(["bootstrap","doctor","readiness","workspaceRun"])}[s.cardId];if(s.cardId==="pipeline"){let m=["doctor","analyze","readiness"].find(A=>R.toLowerCase().includes(A));m&&(x=new Set([m]));}if(x){let m=c.filter(A=>x.has(A.cardId)&&A.risk!=="invasive"&&A.status!=="blocked"&&A.status!=="guidance-only").map(A=>A.id);m.length>0&&(h.dependsOn=P([...h.dependsOn??[],...m]),h.notes.push("This aggregate gate must run after its contract-owned upstream remediation actions."));}a.length>1&&h.notes.push(...a.slice(1,8).map(m=>`Related blocker: ${m}`)),c.push(h),l+=1;}we(c);let p=await Ae({actions:c,workspacePath:i,toolAvailable:e.toolAvailable}),k=ve(p),b$1={safe:p.filter(s=>s.risk==="safe").length,guarded:p.filter(s=>s.risk==="guarded").length,invasive:p.filter(s=>s.risk==="invasive").length};return {schemaVersion:a$1,generatedAt:t,workspace:{name:await b(i),...r?{path:i}:{}},source:{command:"workspace remediation-plan",reportsDir:ae(i,n,r),includeAbsolutePaths:r,ciMode:o},summary:{artifactsScanned:d.length,cardsCovered:P(p.map(s=>s.cardId)).length,totalActions:p.length,executableActions:p.filter(s=>s.status==="ready").length,blockedActions:p.filter(s=>s.status==="blocked").length,guidanceActions:p.filter(s=>s.status==="guidance-only").length,risk:b$1},execution:k,actions:p}}async function Ee(e,i){return h(i,t.artifactRemediationPlan,e)}export{Me as a,Ee as b};

package/dist/chunk-3N27P3KO.js

@@ -0,0 +1,7 @@
+import {d,b,e}from'./chunk-BR6QIYQS.js';import {a}from'./chunk-NMXGSVMD.js';import {d as d$3}from'./chunk-S5KTATOU.js';import {B,q as q$1,A,u as u$1,z,D as D$1}from'./chunk-E42IFQFR.js';import {d as d$2,c as c$1}from'./chunk-ROOPODG6.js';import {k,m,g as g$1,f}from'./chunk-7NKM6EHE.js';import {g}from'./chunk-BLEIUQL6.js';import {e as e$1,g as g$2}from'./chunk-RGNCL5OB.js';import {a as a$1}from'./chunk-TQEMLBAG.js';import {c,d as d$1}from'./chunk-25AWHAB5.js';import {u,q,t as t$1}from'./chunk-VQZ5PI5J.js';import {p,t}from'./chunk-ODK4LCEL.js';import Q from'fs';import y from'path';import D from'chalk';import {execa}from'execa';var yt={"python-fastapi":{runtime:"python",framework:"FastAPI",markers:["pyproject.toml","fastapi"],commands:{init:"python -m pip install -e .",test:"pytest",build:"python -m build",start:"uvicorn main:app --reload"},errorPatterns:{setup:["ModuleNotFoundError","No module named","pip: command not found"],"test-failure":["FAILED","ERROR","test session started"],dependency:["ImportError","missing.*dependency"],runtime:["TypeError","AttributeError","ValueError"],timeout:["timeout","Timeout","timed out"],unknown:[]},healthCheck:{stage:"start",type:"http",value:"http://localhost:8000/docs"},validation:{command:"python -m pip list | grep fastapi",error:"FastAPI not installed"}},"python-django":{runtime:"python",framework:"Django",markers:["manage.py","django"],commands:{init:"python manage.py migrate",test:"python manage.py test",build:"python manage.py collectstatic --noinput",start:"python manage.py runserver 0.0.0.0:8000"},errorPatterns:{setup:["ModuleNotFoundError","ProgrammingError.*migrate"],"test-failure":["FAILED","ERROR","Ran.*test"],dependency:["ImportError","missing.*dependency"],runtime:["DatabaseError","ImproperlyConfigured"],timeout:["timeout","Timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:8e3},dependencies:["init"]},"node-nestjs":{runtime:"node",framework:"NestJS",markers:["package.json","@nestjs/core"],commands:{init:"npm install",test:"npm run test",build:"npm run build",start:"npm run start"},errorPatterns:{setup:["npm ERR!","ENOENT","not found"],"test-failure":["Tests.*failed","FAIL","fail.*test"],dependency:["Cannot find module","ERR_MODULE_NOT_FOUND"],runtime:["TypeError","Error: ","ReferenceError"],timeout:["timeout","TIMEOUT"],unknown:[]},healthCheck:{stage:"start",type:"port",value:3e3}},"node-express":{runtime:"node",framework:"Express",markers:["package.json","express"],commands:{init:"npm install",test:"npm run test",build:"npm run build",start:"npm start"},errorPatterns:{setup:["npm ERR!","ENOENT"],"test-failure":["failed","FAIL"],dependency:["Cannot find module"],runtime:["Error","TypeError"],timeout:["timeout"],unknown:[]}},"go-fiber":{runtime:"go",framework:"Fiber",markers:["go.mod","fiber"],commands:{init:"go mod download && go mod tidy",test:"go test ./...",build:"go build -o app .",start:"./app"},errorPatterns:{setup:["go: .*not found","cannot find","go mod tidy"],"test-failure":["FAIL","--- FAIL"],dependency:["missing.*module"],runtime:["panic","fatal","Error"],timeout:["timeout","context deadline"],unknown:[]},dependencies:["init"]},"go-gin":{runtime:"go",framework:"Gin",markers:["go.mod","gin-gonic"],commands:{init:"go mod download && go mod tidy",test:"go test ./...",build:"go build -o app .",start:"./app"},errorPatterns:{setup:["go: .*not found"],"test-failure":["FAIL"],dependency:["missing.*module"],runtime:["panic"],timeout:["timeout"],unknown:[]}},"java-springboot":{runtime:"java",framework:"Spring Boot",markers:["pom.xml","build.gradle","spring-boot"],commands:{init:"mvn dependency:go-offline",test:"mvn test",build:"mvn package -DskipTests",start:"mvn spring-boot:run"},errorPatterns:{setup:["\\[ERROR\\]","BUILD FAILURE","missing dependencies"],"test-failure":["\\[ERROR\\] Tests run:","BUILD FAILURE"],dependency:["missing.*dependency"],runtime:["Exception","Error","NullPointerException"],timeout:["timeout","Timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:8080}},"php-laravel":{runtime:"php",framework:"Laravel",markers:["composer.json","artisan","app/Models"],commands:{init:"composer install && php artisan migrate:fresh --seed",test:"php artisan test",build:"php artisan config:cache && php artisan route:cache && php artisan view:cache",start:"php artisan serve --host=0.0.0.0 --port=8000"},errorPatterns:{setup:["Composer.*lock","Fatal error","Class.*not found"],"test-failure":["FAILED","Tests.*failed"],dependency:["Class.*not found","require.*failed"],runtime:["Fatal error","Exception","Error"],timeout:["timeout","Timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:8e3},dependencies:["init"]},"php-symfony":{runtime:"php",framework:"Symfony",markers:["composer.json","symfony.lock","bin/console"],commands:{init:"composer install && php bin/console doctrine:database:create",test:"php bin/phpunit",build:"php bin/console cache:clear --env=prod",start:"symfony serve --no-tls"},errorPatterns:{setup:["Composer.*error","Fatal error"],"test-failure":["FAILED","failure"],dependency:["Class.*not found"],runtime:["Fatal error","Exception"],timeout:["timeout"],unknown:[]},dependencies:["init"]},"rust-actix":{runtime:"rust",framework:"Actix-web",markers:["Cargo.toml","actix"],commands:{init:"cargo fetch",test:"cargo test",build:"cargo build --release",start:"cargo run --release"},errorPatterns:{setup:["error: .*could not find","failed.*download"],"test-failure":["test result:","FAILED"],dependency:["can.t find.*crate"],runtime:["error\\[E","thread.*panicked"],timeout:["timeout"],unknown:[]},validation:{command:"cargo --version",error:"Rust/Cargo not installed"}},"rust-axum":{runtime:"rust",framework:"Axum",markers:["Cargo.toml","axum"],commands:{init:"cargo fetch",test:"cargo test",build:"cargo build --release",start:"cargo run --release"},errorPatterns:{setup:["error: .*could not find"],"test-failure":["test result:","FAILED"],dependency:["can.t find.*crate"],runtime:["error\\[E"],timeout:["timeout"],unknown:[]}},"rust-rocket":{runtime:"rust",framework:"Rocket",markers:["Cargo.toml","rocket"],commands:{init:"cargo fetch",test:"cargo test",build:"cargo build --release",start:"cargo run --release"},errorPatterns:{setup:["error: .*could not find"],"test-failure":["FAILED"],dependency:["can.t find"],runtime:["error\\[E"],timeout:["timeout"],unknown:[]}},"dotnet-aspnetcore":{runtime:"dotnet",framework:"ASP.NET Core",markers:[".csproj",".sln","Program.cs"],commands:{init:"dotnet restore",test:"dotnet test",build:"dotnet build -c Release",start:"dotnet run"},errorPatterns:{setup:["error CS","CSPROJ.*not found","NuGet.*restore"],"test-failure":["Failed:.*test","FAILED"],dependency:["error NU1101"],runtime:["error CS","Exception"],timeout:["timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:5e3}},"elixir-phoenix":{runtime:"elixir",framework:"Phoenix",markers:["mix.exs","phoenix"],commands:{init:"mix setup",test:"mix test",build:"mix compile --all-warnings",start:"mix phx.server"},errorPatterns:{setup:["\\*\\* \\(.*Error\\)","Mix.InstallError"],"test-failure":["\\d+\\sfailed","FAILED"],dependency:["dependencies are not available"],runtime:["\\*\\* \\(","RuntimeError"],timeout:["timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:4e3},dependencies:["init"]},"ruby-rails":{runtime:"ruby",framework:"Rails",markers:["Gemfile","config/application.rb","bin/rails"],commands:{init:"bundle install && rails db:prepare",test:"rails test",build:"rails assets:precompile",start:"rails server --binding=0.0.0.0 --port=3000"},errorPatterns:{setup:["Bundler::.*Error","Gem::.*Error"],"test-failure":["failures,","error,","FAILED"],dependency:["Could not find.*gem"],runtime:["Error","Exception","NoMethodError"],timeout:["timeout"],unknown:[]},healthCheck:{stage:"start",type:"port",value:3e3},dependencies:["init"]},"ruby-sinatra":{runtime:"ruby",framework:"Sinatra",markers:["Gemfile","app.rb","sinatra"],commands:{init:"bundle install",test:"rspec",build:`echo "Sinatra apps don't require build"`,start:"ruby app.rb"},errorPatterns:{setup:["Bundler.*Error","Gem.*Error"],"test-failure":["failure","FAILED"],dependency:["Could not find.*gem"],runtime:["Error","NoMethodError"],timeout:["timeout"],unknown:[]}}},ht={init:{python:["pip install -e .","poetry install","pip install -r requirements.txt"],node:["npm install","pnpm install","yarn install"],go:["go mod download && go mod tidy","go get ./..."],java:["mvn dependency:go-offline","gradle dependencies"],php:["composer install"],rust:["cargo fetch"],dotnet:["dotnet restore"],c:["cmake -S . -B build"],cpp:["cmake -S . -B build"],elixir:["mix deps.get"],ruby:["bundle install"],clojure:["clojure -P"],scala:["sbt update"],kotlin:["./gradlew dependencies","gradle dependencies"],deno:[],bun:["bun install"],"jvm-generic":["mvn dependency:go-offline","gradle dependencies"],unknown:[]},test:{python:["pytest","python -m unittest","python -m pytest"],node:["npm test","npm run test"],go:["go test ./...","make test"],java:["mvn test","gradle test"],php:["php artisan test","phpunit","pest"],rust:["cargo test"],dotnet:["dotnet test"],c:["ctest --test-dir build --output-on-failure"],cpp:["ctest --test-dir build --output-on-failure"],elixir:["mix test"],ruby:["rspec","ruby -m minitest"],clojure:["clojure -X:test"],scala:["sbt test"],kotlin:["./gradlew test","gradle test"],deno:["deno task test","deno test"],bun:["bun test","bun run test"],"jvm-generic":["mvn test","gradle test"],unknown:[]},build:{python:["python -m build","python setup.py build"],node:["npm run build"],go:["go build -o app .","go build ./..."],java:["mvn package -DskipTests","gradle build -x test"],php:['echo "PHP build: typically no build step"'],rust:["cargo build --release"],dotnet:["dotnet build -c Release"],c:["cmake --build build"],cpp:["cmake --build build"],elixir:["mix compile"],ruby:["gem build *.gemspec"],clojure:[],scala:["sbt compile"],kotlin:["./gradlew build","gradle build"],deno:["deno task build"],bun:["bun run build"],"jvm-generic":["mvn package -DskipTests","gradle build"],unknown:[]},start:{python:["python app.py","python main.py","uvicorn main:app --reload"],node:["npm start","node index.js","node src/index.js"],go:["./app","go run main.go","go run ./..."],java:["mvn spring-boot:run","gradle bootRun","java -jar target/*.jar"],php:["php -S 0.0.0.0:8000","php artisan serve"],rust:["cargo run --release","./target/release/app"],dotnet:["dotnet run"],c:[],cpp:[],elixir:["mix phx.server","iex -S mix"],ruby:["rails server","ruby app.rb","bundle exec puma"],clojure:["clojure -M:run"],scala:["sbt run"],kotlin:["./gradlew run","gradle run"],deno:["deno task start","deno task dev"],bun:["bun run start","bun run dev"],"jvm-generic":["java -jar *.jar","gradle run"],unknown:[]}};function de(e,r){if(r){let t=r.trim().toLowerCase().replace(/[_.\s]+/g,"-"),n=f(r),o=`${e}-${n==="gofiber"?"fiber":n==="gogin"?"gin":n==="dotnet"?"aspnetcore":n!=="unknown"?n:t==="fiber"?"fiber":t==="aspnetcore"||t==="asp-net-core"?"aspnetcore":t}`;return yt[o]}}function Je(e,r,t){if(r){let n=de(e,r);if(n&&n.commands[t])return n.commands[t]}if(["init","test","build","start"].includes(t)){let n=ht[t]?.[e]??[];return n.length>0?n[0]:void 0}}var kt={test:"test",build:"build",start:"start"};function le(e){if(e.stage==="init")return e.runtime==="node"?A(e.projectPath):Je(e.runtime,e.framework,e.stage);if(e.runtime==="node"){let r=kt[e.stage];if(r){let t=u$1(e.projectPath,r,{framework:e.framework});if(t)return z(e.projectPath,t.scriptName)}}return Je(e.runtime,e.framework,e.stage)}function bt(e){let r=k(e).map(t=>t==="python"?"python":t==="node"||t==="bun"?"node":t==="go"?"go":t==="java"?"java":t==="php"?"php":t==="rust"?"rust":t==="dotnet"?"dotnet":t==="elixir"?"elixir":t==="ruby"?"ruby":t==="clojure"||t==="scala"||t==="kotlin"?"jvm-generic":null).filter(t=>t!==null).filter((t,n,s)=>s.indexOf(t)===n);return {primary:r.length>0?r[0]:"unknown",secondary:r.slice(1)}}function Ze(e){return bt(e).primary}function Qe(e,r,t){if(!e)return "unknown";r||(r={timeout:["timed out","timeout","deadline exceeded","SocketTimeoutException"],dependency:["cannot find module","import.*error","Could not find a package configuration file provided by","CMAKE_PREFIX_PATH","failed to fetch","error while requesting resource","unable to (?:resolve|connect)","could not resolve host","network (?:is )?unreachable","ECONNREFUSED","ENOTFOUND"],setup:["ModuleNotFoundError","No module named","npm ERR!","error:","not found"],"test-failure":["FAILED","FAIL","failed"],runtime:["Exception","Error:","panic","TypeError"],unknown:[]});for(let[n,s]of Object.entries(r))if(!(n==="test-failure"&&t&&t!=="test")){for(let o of s)if(new RegExp(o,"i").test(e))return n}return "unknown"}async function re(e,r){let t=e.split(/[&|;]\s*/)[0].trim().split(/\s+/)[0];if(["echo","cd","pwd","test","true","false","exit"].includes(t))return {valid:true};if(t.includes("/")||t.includes("\\")){let s=y.isAbsolute(t)?t:y.resolve(r??process.cwd(),t);try{return await Q.promises.access(s,process.platform==="win32"?Q.constants.F_OK:Q.constants.X_OK),{valid:true}}catch{return {valid:false,reason:`Command '${t}' not found or not executable in '${r??process.cwd()}'`}}}try{let s=process.platform==="win32"?"where":"which";if((await execa(s,[t],{reject:false})).exitCode===0)return {valid:true}}catch{}return {valid:false,reason:`Command '${t}' not found or not executable`}}function et(e,r,t){if(!r)return e;let n=typeof r=="object"&&!Array.isArray(r)&&("dev"in r||"staging"in r||"prod"in r||"default"in r)&&!Object.keys(r).some(s=>["init","test","build","start"].includes(s))?r:{};return t&&typeof n[t]=="string"?n[t]:typeof n.default=="string"?n.default:e}async function tt(e,r){if(!e)return {healthy:true};switch(e.type){case "port":{let t=e.value;try{let n=await import('net');return new Promise(s=>{let o=new n.Socket,i=5e3;o.setTimeout(i),o.on("connect",()=>{o.destroy(),s({healthy:true,reason:`Port ${t} is listening`});}),o.on("timeout",()=>{o.destroy(),s({healthy:false,reason:`Port ${t} timeout after ${i}ms`});}),o.on("error",l=>{o.destroy(),s({healthy:false,reason:`Port ${t} error: ${String(l)}`});}),o.connect(t,"localhost");})}catch(n){return {healthy:false,reason:`Port check error: ${n instanceof Error?n.message:String(n)}`}}}case "http":{let t=e.value,n;try{let s=new AbortController;n=setTimeout(()=>s.abort(),5e3);let o=await fetch(t,{method:"GET",signal:s.signal});return {healthy:o.status===200,reason:`HTTP ${o.status}`,metadata:{status:o.status}}}catch(s){return {healthy:false,reason:`HTTP check error: ${s instanceof Error?s.message:String(s)}`}}finally{n&&clearTimeout(n);}}case "log":{let t=e.value;if(!r)return {healthy:true};try{let n=[y.join(r,".workspai","last-run.log"),y.join(r,".rapidkit","last-run.log")].find(s=>Q.existsSync(s));if(n){let s=Q.readFileSync(n,"utf-8"),o=new RegExp(t,"i");return {healthy:o.test(s),reason:o.test(s)?"Log pattern found":"Log pattern not found"}}return {healthy:true,reason:"No log file to check"}}catch(n){return {healthy:false,reason:`Log check error: ${n instanceof Error?n.message:String(n)}`}}}case "command":{let t=e.value;try{let n=await execa(t,[],{cwd:r,reject:false,shell:true});return {healthy:n.exitCode===0,reason:n.exitCode===0?"Health check passed":"Health check failed",metadata:{exitCode:n.exitCode}}}catch(n){return {healthy:false,reason:`Command check error: ${n instanceof Error?n.message:String(n)}`}}}default:return {healthy:true}}}var rt={init:"init",test:"test",build:"build",start:"start"};function wt(e){return e in rt?rt[e]:null}function xt(e,r){let n=q$1(e)?.contextJson?.commands;if(!n||typeof n!="object"||Array.isArray(n))return;let s=n[r];if(typeof s=="string"&&s.trim().length>0)return s.trim();if(s&&typeof s=="object"&&!Array.isArray(s)){let o=s,i=o.default??o.dev;if(typeof i=="string"&&i.trim().length>0)return i.trim()}}function nt(e,r,t=D$1(e)){let n=wt(r);if(!n)return xt(e,r)?{supported:true}:{supported:false,reason:`Workspace stage "${r}" is not part of the Workspai fleet contract.`};if(!t.projectRoot)return {supported:false,reason:"No Workspai project metadata was detected for this target."};let s=t.commandMap[n];if(!s||s.status!=="supported"){let o=t.runtimeSupportTier==="observed"||t.frameworkSupportTier==="observed";return {supported:false,reason:s?.reason??`Command "${n}" is not supported for this project runtime/framework.`,shouldFail:!o}}return {supported:true}}var vt=new Set(["init","test","build","start"]),Rt=new Set([".git","node_modules",".workspai",".rapidkit",".venv","dist","build","coverage","htmlcov"]);async function Y(e){try{return await Q.promises.access(e,Q.constants.F_OK),true}catch{return  false}}function ot(e,r){let t=y.relative(y.resolve(e),y.resolve(r));return t===""||!t.startsWith(`..${y.sep}`)&&t!==".."&&!y.isAbsolute(t)}function St(e){let r=y.resolve(e.projectPath,e.unit.root);return !e.selectedProjectPaths.some(t=>y.resolve(t)===y.resolve(e.projectPath)?false:ot(e.projectPath,t)&&ot(t,r))}async function Ct(e){for(let r of e)if(await Y(r))return  true;return  false}async function Et(e,r,t){if(r==="python"){let i=[y.join(e,".workspai","cli.py"),y.join(e,".rapidkit","cli.py")];for(let l of i)if(await Y(l))return {valid:true};return {valid:false,reason:"Project-local .workspai/cli.py is missing. Run `workspai init` in this project first."}}let s={go:"go",rust:"cargo",dotnet:"dotnet",php:"php"}[r];if(s)return re(s,e);let o=t.trim().split(/\s+/)[0];if(o&&["npm","npx","pnpm","yarn"].includes(o)){let i=e$1(o);if((await execa(i.command,[...i.prefixArgs,"--version"],{reject:false,env:g$2()})).exitCode===0)return {valid:true}}return re(t,e)}async function pe(e){let r=await Q.promises.readFile(e,"utf-8");return JSON.parse(r)}function K(e){return e.replace(/\\/g,"/")}function jt(e){let r=e?.trim();return r?r.startsWith("project:")?r.slice(8).trim()||null:r:null}async function Pt(e){let r=y.join(e,p.model);if(await Y(r))try{let n=((await pe(r)).projects??[]).map(s=>typeof s.path=="string"?d$2(e,s.path):null).filter(s=>!!s).filter((s,o,i)=>i.indexOf(s)===o).filter(s=>Q.existsSync(s));if(n.length>0)return n.sort()}catch{}return a(e,{skipDirs:Rt,includeHiddenDirs:false,descendIntoMatchedProjects:false,isProjectDir:async(t,n)=>await Ct([...u(t,"context.json"),...u(t,"project.json")])?true:y.resolve(t)===y.resolve(n)?false:k(t).length>0})}async function ct(e){for(let r of [y.join(".workspai","project.json"),y.join(".workspai","context.json"),y.join(".rapidkit","project.json"),y.join(".rapidkit","context.json")]){let t=y.join(e,r);if(await Y(t))try{let n=await pe(t),s=n.name??n.projectName??n.slug;if(typeof s=="string"&&s.trim())return s.trim()}catch{}}return null}async function At(e,r,t){let n=jt(t);if(!n)return {projects:r,normalizedScope:null};let s=K(n).toLowerCase(),o=[];for(let i of r){let l=await ct(i);c$1({workspacePath:e,projectPath:i,declaredName:l}).map(m=>K(m).toLowerCase()).includes(s)&&o.push(i);}if(o.length===0)throw new Error(`Workspace run scope did not match any project: ${t}`);return {projects:o,normalizedScope:n}}async function Ft(e,r,t){let n=await execa("git",["diff","--name-only",`${t}...HEAD`],{cwd:e,reject:false,env:a$1()});if(n.exitCode!==0)return new Set(r);let s=n.stdout.split(/\r?\n/).map(i=>i.trim()).filter(i=>i.length>0).map(i=>K(i));if(s.length===0)return new Set;let o=new Set;for(let i of r){let l=K(y.relative(e,i));if(!l||l===".")continue;let c=`${l}/`;s.some(m=>m===l||m.startsWith(c))&&o.add(i);}return o}async function Tt(e,r,t$1){let n=await g(e,t.workspaceContract)??q(e,"workspace.contract.json");if(await Y(n))try{let u=await Ot(e,r,t$1,n);if(u.graphStatus!=="missing")return u}catch{return {expanded:t$1,graphStatus:"invalid",expansionDepth:0}}let s=await g(e,".workspai/workspace-dependency-graph.json")??q(e,"workspace-dependency-graph.json");if(!await Y(s))return {expanded:t$1,graphStatus:"missing",expansionDepth:0};let o;try{o=await pe(s);}catch{return {expanded:t$1,graphStatus:"invalid",expansionDepth:0}}let i=new Set(r.map(u=>y.resolve(u))),l=new Map;if(!o||typeof o!="object"||Array.isArray(o))return {expanded:t$1,graphStatus:"invalid",expansionDepth:0};let c=Array.isArray(o.projects)?o.projects:[];for(let u of c){if(!u||typeof u!="object"||Array.isArray(u))continue;let p=u,d=typeof p.path=="string"?p.path:"",w=y.resolve(e,d);if(!i.has(w))continue;let x=Array.isArray(p.dependsOn)?p.dependsOn.filter(C=>typeof C=="string"):[];for(let C of x){let v=y.resolve(e,C);i.has(v)&&(l.has(v)||l.set(v,new Set),l.get(v)?.add(w));}}let m=d$3(l,t$1);return {expanded:m.reached,graphStatus:"loaded",expansionDepth:m.added}}async function Ot(e,r,t,n){let s=await pe(n);if(!s||typeof s!="object"||Array.isArray(s))return {expanded:t,graphStatus:"invalid",expansionDepth:0};let o=s,i=Array.isArray(o.projects)?o.projects:null;if(!i)return {expanded:t,graphStatus:"invalid",expansionDepth:0};let l=new Map,c=new Map;for(let w of r){let x=K(y.relative(e,w));c.set(x,y.resolve(w));}let m=new Map,u=new Map,p=new Map;for(let w of i){if(!w||typeof w!="object"||Array.isArray(w))continue;let x=w,C=typeof x.slug=="string"?x.slug:"",v=typeof x.relativePath=="string"?K(x.relativePath):C,h=c.get(v);!C||!h||l.set(C,h);}for(let w of i){if(!w||typeof w!="object"||Array.isArray(w))continue;let x=w,C=typeof x.slug=="string"?x.slug:"",v=l.get(C);if(!v)continue;let h=x.contracts&&typeof x.contracts=="object"&&!Array.isArray(x.contracts)?x.contracts:{},R=Array.isArray(h.dependsOn)?h.dependsOn.filter(S=>typeof S=="string"):[],M=Array.isArray(h.publishes)?h.publishes.filter(S=>typeof S=="string"):[],_=Array.isArray(h.consumes)?h.consumes.filter(S=>typeof S=="string"):[];for(let S of R){let P=l.get(S);P&&(p.has(P)||p.set(P,new Set),p.get(P)?.add(v));}for(let S of M)m.has(S)||m.set(S,new Set),m.get(S)?.add(v);for(let S of _)u.has(S)||u.set(S,new Set),u.get(S)?.add(v);}for(let[w,x]of m.entries()){let C=u.get(w);if(C)for(let v of x){p.has(v)||p.set(v,new Set);for(let h of C)h!==v&&p.get(v)?.add(h);}}let d=d$3(p,t);return {expanded:d.reached,graphStatus:"loaded",expansionDepth:d.added}}async function Dt(e,r){if(typeof r=="boolean")return r;let t=t$1(e,"policies.yml").find(o=>Q.existsSync(o))??q(e,"policies.yml");if(!await Y(t))return  true;let n="";try{n=await Q.promises.readFile(t,"utf-8");}catch{return  true}let s=n.match(/^[\t ]*rules\.enforce_workspace_run_gates:\s*(true|false)\s*(?:#.*)?$/m);return s?s[1]==="true":true}function It(e,r){let t=process.env.RAPIDKIT_WORKSPACE_RUN_STAGE_TIMEOUT_MS;if(t){let n=Number.parseInt(t,10);if(Number.isFinite(n)&&n>0)return n}return e!=="init"?9e4:r==="python"||r==="java"||r==="jvm-generic"||r==="dotnet"||r==="rust"?6e5:3e5}function $t(e){let r=e.trim();if(!r||/[&|;<>()$`"'\n\r]/.test(r))return null;let[t,...n]=r.split(/\s+/);return !t||/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)||![t,...n].every(s=>/^[A-Za-z0-9_./:@%+,=\\-]+$/.test(s))?null:{file:t,args:n}}function st(e,r){let t=Number.parseInt(process.env[e]??"",10);return Number.isFinite(t)&&t>0?t:r}function xe(e){return new Promise(r=>setTimeout(r,e))}async function Nt(e){let r=process.argv[1];if(e.useRapidkitWrapper&&!r)return {exitCode:1,stdout:"",stderr:"Workspai entrypoint is unavailable for startup verification.",healthStatus:{healthy:false,reason:"Workspai entrypoint is unavailable."}};let t=e.useRapidkitWrapper&&r?execa(process.execPath,[r,"start"],{cwd:e.projectPath,reject:false,timeout:e.timeoutMs,env:{...process.env,RAPIDKIT_WORKSPACE_RUN_CHILD:"1"}}):execa(e.finalCommand,[],{cwd:e.projectPath,reject:false,shell:true,timeout:e.timeoutMs}),n=Promise.resolve(t).then(u=>({kind:"exit",result:u}),u=>({kind:"error",error:u})),s=st("WORKSPAI_WORKSPACE_RUN_STARTUP_GRACE_MS",2e3),o=await Promise.race([n,xe(s).then(()=>({kind:"alive"}))]);if(o.kind==="error"){let u=typeof o.error=="object"&&o.error!==null&&"timedOut"in o.error&&!!o.error.timedOut;return {exitCode:u?124:1,stdout:"",stderr:o.error instanceof Error?o.error.message:String(o.error),timedOut:u,healthStatus:{healthy:false,reason:"The start command failed before readiness."}}}if(o.kind==="exit"){let u=Number(o.result.exitCode??0);return {exitCode:u,stdout:String(o.result.stdout??""),stderr:String(o.result.stderr??""),healthStatus:{healthy:u===0,reason:u===0?"The start command completed successfully.":`The start command exited with code ${u} before readiness.`}}}let i=de(e.runtime,e.framework)?.healthCheck,l=i?{healthy:false,reason:"The configured health check has not passed yet."}:{healthy:true,reason:`The service remained alive for ${s}ms (bounded startup smoke).`};if(i){let u=st("WORKSPAI_WORKSPACE_RUN_STARTUP_HEALTH_TIMEOUT_MS",15e3),p=Date.now()+u;for(;Date.now()<p;){let d=await tt(i,e.projectPath);if(l={healthy:d.healthy,reason:d.reason},d.healthy)break;if((await Promise.race([n,xe(350).then(()=>({kind:"alive"}))])).kind!=="alive"){l={healthy:false,reason:"The service exited before its configured health check passed."};break}}}try{t.kill?.("SIGTERM",{forceKillAfterDelay:1e3});}catch{try{t.kill?.();}catch{}}let c=await Promise.race([n,xe(2e3).then(()=>({kind:"alive"}))]),m=c.kind==="exit"?c.result:void 0;return {exitCode:l.healthy?0:1,stdout:String(m?.stdout??""),stderr:String(m?.stderr??""),healthStatus:l}}async function Re(e,r,t,n=false){let s=process.argv[1];if(!s)return {exitCode:1,stdout:"",stderr:"RapidKit entrypoint is unavailable for nested workspace-run execution."};let o=false,i,l;try{let c=execa(process.execPath,[s,...e],{cwd:r,reject:false,detached:process.platform!=="win32",env:{...process.env,RAPIDKIT_WORKSPACE_RUN_CHILD:"1"}});t&&t>0&&(l=setTimeout(()=>{o=true;let u=c.pid;if(!u){c.kill("SIGTERM");return}if(process.platform==="win32"){execa("taskkill",["/pid",String(u),"/T","/F"],{reject:false});return}try{process.kill(-u,"SIGTERM");}catch{c.kill("SIGTERM");}i=setTimeout(()=>{try{process.kill(-u,"SIGKILL");}catch{}},1e3),i.unref();},t),l.unref()),n&&(c.stdout?.on("data",u=>process.stdout.write(u)),c.stderr?.on("data",u=>process.stderr.write(u)));let m=await c;return {exitCode:o?124:Number(m.exitCode??1),stdout:m.stdout,stderr:o?`${m.stderr??""}${m.stderr?`
+`:""}Stage timed out after ${t}ms`:m.stderr}}catch(c){let m=o||typeof c=="object"&&c!==null&&"timedOut"in c&&!!c.timedOut;return {exitCode:m?124:1,stdout:typeof c=="object"&&c!==null&&"stdout"in c?String(c.stdout??""):"",stderr:m?`Stage timed out after ${t}ms`:typeof c=="object"&&c!==null&&"stderr"in c?String(c.stderr??""):c instanceof Error?c.message:String(c)}}finally{l&&clearTimeout(l),i&&clearTimeout(i);}}function dt(e){return e==="node"||e==="go"||e==="java"||e==="python"||e==="dotnet"||e==="rust"||e==="php"}function Wt(){return process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"}function Mt(e,r=8){if(e.length<=r)return e.join(`
+`);let t=lt(e),n=t?e.lastIndexOf(t):-1,s=new Set([0,1]);if(n>=0)for(let o=Math.max(0,n-2);o<=n+2;o+=1)o<e.length&&s.add(o);for(let o=e.length-1;o>=0&&s.size<r;o-=1)s.add(o);return [...s].sort((o,i)=>o-i).slice(0,r).map(o=>e[o]).join(`
+`)}function lt(e){let r=/(?:\bnot found\b|\bno such\b|\bmissing\b|\bfailed\b|\berror\b|\bexception\b|\bcannot\b|\bdenied\b|\btimeout\b|\btimed out\b|\benoent\b|\beacces\b|\beperm\b)/i;return [...e].reverse().find(t=>r.test(t))??e.at(-1)}async function _t(e){let r=process.cwd();try{process.chdir(e);let{handleInitCommand:t}=await import('./index.js');return {exitCode:await t(["init"]),stdout:"",stderr:""}}finally{process.chdir(r);}}async function ve(e){let r=p=>{let d=g$1(p);return d==="node"||d==="bun"?"node":d==="python"?"python":d==="go"?"go":d==="java"?"java":d==="php"?"php":d==="ruby"?"ruby":d==="rust"?"rust":d==="dotnet"?"dotnet":d==="elixir"?"elixir":d==="clojure"||d==="scala"||d==="kotlin"?"jvm-generic":Ze(e)},t=p=>{if(!p)return;let d=f(p);if(new Set(["fastapi","django","flask","nestjs","express","fastify","koa","gofiber","gogin","echo","springboot","laravel","symfony","rails","sinatra","dotnet","actix","axum","rocket","phoenix"]).has(d))return d},n=q$1(e),s=n?.detection??m(e,n?.projectJson??null),o=n?.contextJson,i=r(s.runtime),l=t(s.key),c={},m$1=new Set(["init","test","build","start"]);if(o?.commands&&typeof o.commands=="object")for(let[p,d]of Object.entries(o.commands))typeof d=="string"&&m$1.has(p)&&(c[p]=d);let u;if(o?.commandEnvironments&&typeof o.commandEnvironments=="object"){let p=o.commandEnvironments;u={dev:typeof p.dev=="string"?p.dev:void 0,staging:typeof p.staging=="string"?p.staging:void 0,prod:typeof p.prod=="string"?p.prod:void 0,default:typeof p.default=="string"?p.default:void 0};}return {runtime:i,framework:l,commandOverrides:Object.keys(c).length>0?c:void 0,environmentCommandVariants:u,environment:typeof o?.environment=="string"?o.environment:void 0}}async function at(e,r,t,n,s,o,i,l=false){let c=!s?.[r]&&dt(t),m;if(s&&s[r]?m=s[r]:c?m=`rapidkit ${r}`:m=le({projectPath:e,runtime:t,framework:n,stage:r}),!m)return {exitCode:127,command:`<stage not supported for ${t}>`,message:`No stage command found for runtime '${t}' and framework '${n||"unknown"}'`,errorCategory:"runtime"};let u=et(m,o,i);if(!u)return {exitCode:127,command:m,message:"Failed to resolve stage command",errorCategory:"runtime"};let p=le({projectPath:e,runtime:t,framework:n,stage:r});if(c){if(p){let b=c?await Et(e,t,p):await re(p,e);if(!b.valid)return {exitCode:127,command:u,message:b.reason||"Command not available",errorCategory:"setup"}}}else {let b=await re(u,e);if(!b.valid)return {exitCode:127,command:u,message:b.reason||"Command not available",errorCategory:"setup"}}let d=0,w="",x="",C,v=false,h,R=It(r,t),M=Date.now();try{let b=r==="start"?await Nt({projectPath:e,finalCommand:u,useRapidkitWrapper:c,runtime:t,framework:n,timeoutMs:R}):c?r==="init"&&Wt()?await _t(e):await Re([r],e,R,l):await(async()=>{let $=$t(u);return $?execa($.file,$.args,{cwd:e,reject:false,timeout:R,forceKillAfterDelay:1e3}):execa(u,[],{cwd:e,reject:false,shell:true,timeout:R,forceKillAfterDelay:1e3})})();if(v=!!(typeof b=="object"&&b!==null&&"timedOut"in b&&b.timedOut),d=v?124:Number(b.exitCode??0),w=b.stdout,x=b.stderr,h=r==="start"?b.healthStatus:void 0,d!==0){let $=`${w}
+${x}`,me=Date.now()-M,ee=Qe($,void 0,r);C=v||d===124||d===143&&me>=Math.floor(R*.8)||ee==="timeout"?"timeout":ee;}}catch(b){let $=typeof b=="object"&&b!==null&&"timedOut"in b&&!!b.timedOut;return {exitCode:$?124:1,command:u,message:$?`Stage timed out after ${R}ms`:b instanceof Error?b.message:"Command execution failed",errorCategory:$?"timeout":"runtime"}}let _=`${w}
+${x}`.split(/\r?\n/).map(b=>b.trim()).filter(Boolean),S=Mt(_),P=lt(_),I=Date.now()-M;if(r==="test"&&t==="go"&&d!==0&&/(?:matched no packages|no packages to test)/i.test(_.join(`
+`)))return {exitCode:0,command:u,skipped:true,message:"No Go packages matched; test stage is not applicable to this runtime unit."};let z=v||d===124||d===143&&I>=Math.floor(R*.8),V=d===0?void 0:z?"timeout":C,J=d===0||!V?void 0:{category:V,exitCode:d,command:u,timedOut:z,timeoutMs:R,...S?{outputExcerpt:S}:{}};return {exitCode:d,command:u,errorCategory:V,healthStatus:h,failureDiagnostic:J,message:z?`Stage timed out after ${R}ms`:d!==0?P?`Stage failed with exit code ${d}: ${P}`:`Stage failed with exit code ${d}`:void 0}}function it(e){try{return JSON.parse(e)}catch{return null}}function Lt(e){switch(e){case "dotnet":return "Install .NET 8+ SDK, then rerun `npx workspai setup dotnet` or `npx workspai init`.";case "go":return "Install Go 1.21+, then rerun `npx workspai setup go` or `npx workspai init`.";case "java":case "jvm-generic":return "Install Java 21+ and Maven/Gradle, then rerun `npx workspai setup java` or `npx workspai init`.";case "node":return "Install Node.js LTS and npm/pnpm/yarn, then rerun `npx workspai setup node` or `npx workspai init`.";case "python":return "Install Python 3.10+ and pip/Poetry, then rerun `npx workspai setup python` or `npx workspai init`.";default:return null}}async function Gt(e){let r=[],t=await Re(["doctor","workspace","--json"],e);if(t.exitCode!==0)r.push({gate:"doctor-workspace",status:"fail",summary:"doctor workspace command failed"});else {let o=it(t.stdout)?.healthScore,i=Number(o?.errors??0);Number.isFinite(i)&&i>0?r.push({gate:"doctor-workspace",status:"fail",summary:`doctor workspace reports ${i} error(s)`}):r.push({gate:"doctor-workspace",status:"pass",summary:"doctor workspace passed"});}let n=await Re(["readiness","--json"],e);if(n.exitCode!==0)r.push({gate:"readiness",status:"fail",summary:"readiness command failed"});else {let s=it(n.stdout),o=String(s?.overallStatus??"").toLowerCase();o==="fail"?r.push({gate:"readiness",status:"fail",summary:"readiness overall status is fail"}):o==="warn"?r.push({gate:"readiness",status:"warn",summary:"readiness overall status is warn"}):r.push({gate:"readiness",status:"pass",summary:"readiness overall status is pass"});}return r}var Bt=new Set(["dev","stop"]);function Kt(e){let r=e.trim();return !r||Bt.has(r.toLowerCase())?false:vt.has(r)?true:/^[a-z][a-z0-9_-]*$/i.test(r)}function ut(e,r,t){let n=K(y.relative(t,r));return (Array.isArray(e.projects)?e.projects:[]).some(o=>{if(!o||typeof o!="object")return  false;let i=o,l=[i.relativePath,i.path].filter(c=>typeof c=="string"&&c.length>0).map(c=>K(c));return i.status==="passed"&&(l.includes(n)||l.some(c=>c.endsWith(`/${n}`)))})}function Ut(e,r){return de(e,r)?.dependencies??[]}function zt(e,r){let t=Math.max(1,Math.min(4,r)),n=Number(e??t);return Number.isFinite(n)?Math.max(1,Math.min(16,Math.trunc(n))):t}async function Er(e$1){if(!Kt(e$1.stage))throw new Error(`Unsupported workspace run stage: ${e$1.stage}`);let r=Date.now(),t=y.resolve(e$1.workspacePath);c({blockId:"workspace.run.resolve",status:"running",message:"Resolving workspace project fleet",component:"workspace-run"});let n=await d(t),s=await Pt(t),{projects:o,normalizedScope:i}=await At(t,s,e$1.scope),l=e$1.affected===true,c$1=e$1.blastRadius===true,m=e$1.since?.trim()||"HEAD~1",u=l?await Ft(t,o,m):new Set(o),p,d$2="not-applicable",w=0,x="all";if(l&&c$1){let g=await Tt(t,s,u);p=g.expanded,d$2=g.graphStatus,w=g.expansionDepth,x="affected+blast-radius";}else l?(p=u,x="affected"):(p=u,x="all");c({blockId:"workspace.run.resolve",status:"succeeded",message:`Resolved ${o.length} project(s)`,component:"workspace-run",attributes:{projects:o.length,selectionMode:x}}),c({blockId:"workspace.run.gates",status:"running",message:"Evaluating workspace run gates",component:"workspace-run"});let C=e$1.stage==="init"||e$1.planOnly===true?false:await Dt(t,e$1.enforceGates),v=C?await Gt(t):[{gate:"doctor-workspace",status:"skipped",summary:"workspace run gates disabled"},{gate:"readiness",status:"skipped",summary:"workspace run gates disabled"}],h=v.find(g=>g.status==="fail");c({blockId:"workspace.run.gates",status:h?"blocked":"succeeded",message:h?`Blocked by ${h.gate}`:"Workspace run gates passed",component:"workspace-run",attributes:{gates:v}});let R=o.filter(g=>p.has(g)),M=e$1.continueOnError===true||e$1.stage==="init",_=e$1.parallel===true,S=zt(e$1.maxWorkers,R.length),P=R.length,I=0;c({blockId:"workspace.run.execute",status:h?"blocked":"running",message:h?`Execution blocked by ${h.gate}`:`Executing ${e$1.stage} across ${P} project(s)`,component:"workspace-run",progress:{completed:0,total:P},attributes:{stage:e$1.stage,parallel:_,maxWorkers:S}}),e$1.json||console.log(D.gray(`Workspace run (${e$1.stage}) started: ${P} target(s), ${_?`parallel x${S}`:"sequential"}`));let U=new Map;for(let g of s){let k=K(y.relative(t,g)),a=await ct(g),L=o.includes(g),E=L&&p.has(g);U.set(g,{path:g,relativePath:k,projectName:a??(y.basename(k)||y.basename(g)),selected:E,affected:E,status:"skipped",exitCode:null,durationMs:0,reason:E?void 0:L?"not affected":"outside scope",framework:void 0,runtimeDetected:void 0,executionCommand:void 0});}if(h)for(let g of R){let k=U.get(g);k&&(k.status="skipped",k.reason=`blocked by ${h.gate}`);}else {let g=async k=>{let a=U.get(k);if(!a)return;let L=K(y.relative(t,k));e$1.json||console.log(D.gray(`\u23F3 [${I}/${P}] ${e$1.stage} ${L}`)),a.selected=true,a.affected=true;let E=Date.now(),N=B(k),T=e$1.runtime?.trim().toLowerCase(),O=N.units.filter(f=>St({projectPath:k,unit:f,selectedProjectPaths:R})).filter(f=>!T||f.runtime===T).map(f=>({unit:f,stage:f.stages.find(j=>j.stage===e$1.stage)})).filter(f=>!!f.stage),G=O.map(({unit:f,stage:j})=>({unitId:f.id,runtime:f.runtime,role:f.role,root:f.root,manifest:f.manifest,stage:j.stage,command:j.command,status:"planned",exitCode:null,durationMs:0}));if(a.runtimeExecutions=G,!N.polyglot&&!T&&G.length===1&&O[0]?.unit.root==="."){let f=await ve(k);a.framework=f.framework,a.runtimeDetected=f.runtime;let j=f.commandOverrides?.[e$1.stage],W=j||(dt(f.runtime)?`rapidkit ${e$1.stage}`:le({projectPath:k,runtime:f.runtime,framework:f.framework,stage:e$1.stage}));if(W){let F=G[0];G.splice(0,G.length,{...F,unitId:`project:${f.runtime}`,root:".",manifest:O.map(({unit:ne})=>ne.manifest).join(", "),command:W});}}if(e$1.planOnly){a.runtimeDetected||(a.runtimeDetected=O[0]?.unit.runtime),a.status="skipped",a.reason=O.length>0?`plan only: ${O.length} runtime unit(s)`:T?`no ${T} runtime unit supports stage "${e$1.stage}"`:`no runtime unit supports stage "${e$1.stage}"`,a.durationMs=Date.now()-E,I+=1;return}if(N.polyglot||T||O.length>1||O.length===1&&O[0]?.unit.root!=="."){if(O.length===0){a.status="failed",a.reason=T?`No ${T} runtime unit supports stage "${e$1.stage}"`:`No runtime unit supports stage "${e$1.stage}"`,a.errorCategory="setup",a.errorMessage=a.reason,a.exitCode=127,a.durationMs=Date.now()-E,I+=1;return}let f;for(let F=0;F<O.length;F+=1){let{unit:ne,stage:Ee}=O[F],Z=G[F],je=y.resolve(k,ne.root),gt=Date.now(),he=await ve(je),H=await at(je,e$1.stage,ne.runtime,he.framework,{[e$1.stage]:Ee.command},he.environmentCommandVariants,he.environment,!e$1.json);if(Z.durationMs=Date.now()-gt,Z.exitCode=H.exitCode,Z.status=H.skipped?"skipped":H.exitCode===0?"passed":"failed",Z.reason=H.message,Z.errorCategory=H.errorCategory,Z.failureDiagnostic=H.failureDiagnostic,H.exitCode!==0&&!f&&(f=H.message??Ee.command),H.exitCode!==0&&!M){for(let Pe of G.slice(F+1))Pe.status="skipped",Pe.reason="stopped after runtime-unit failure";break}}let j=G.find(F=>F.status==="failed");a.runtimeDetected=O[0]?.unit.runtime,a.executionCommand=G.filter(F=>F.status!=="skipped").map(F=>`[${F.runtime}:${F.root}] ${F.command}`).join(" && "),a.durationMs=Date.now()-E;let W=G.find(F=>F.status==="passed");a.exitCode=j?.exitCode??0,a.status=j?"failed":W?"passed":"skipped",a.reason=j?f??"runtime-unit stage failed":W?void 0:"No applicable runtime unit executed the requested stage",a.errorCategory=j?j.errorCategory??"runtime":void 0,a.errorMessage=a.reason,a.failureDiagnostic=j?.failureDiagnostic,I+=1;return}let{runtime:fe,framework:ge,commandOverrides:pt,environmentCommandVariants:mt,environment:ft}=await ve(k);a.runtimeDetected=fe,a.framework=ge;let ye=nt(k,e$1.stage);if(!ye.supported){a.status=ye.shouldFail===false?"skipped":"failed",a.reason=ye.reason??`stage "${e$1.stage}" unsupported for project`,a.durationMs=Date.now()-E,a.exitCode=a.status==="failed"?127:null,a.status==="failed"&&(a.errorCategory="setup",a.errorMessage=a.reason),I+=1;return}if(e$1.reusePassed&&n){let f=n.stages[e$1.stage]??n.stages[e$1.stage];if(f&&ut(f,k,t)){a.status="passed",a.reason="reused passed result from workspace-run-last.json",a.durationMs=Date.now()-E,a.exitCode=0,I+=1,e$1.json||console.log(D.gray(`\u21BA reused passed cache for ${L}`));return}}let Ce=Ut(fe,ge).filter(f=>f!==e$1.stage);if(Ce.length>0&&n){let f=Ce.find(j=>{let W=n.stages[j];return !W||!ut(W,k,t)});if(f){a.status="skipped",a.reason=`dependency stage "${f}" not satisfied in workspace-run-last.json`,a.durationMs=Date.now()-E,a.exitCode=null,I+=1;return}}let A=await at(k,e$1.stage,fe,ge,pt,mt,ft,!e$1.json);a.executionCommand=A.command,a.errorCategory=A.errorCategory,a.healthStatus=A.healthStatus,a.failureDiagnostic=A.failureDiagnostic,a.durationMs=Date.now()-E,a.exitCode=A.exitCode;let q=a.runtimeExecutions?.[0];if(q&&(q.command=A.command,q.status=A.skipped?"skipped":A.exitCode===0?"passed":"failed",q.exitCode=A.exitCode,q.durationMs=a.durationMs,q.reason=A.message,q.errorCategory=A.errorCategory,q.failureDiagnostic=A.failureDiagnostic),A.skipped?(a.status="skipped",a.reason=A.message):A.exitCode===0?(a.status="passed",a.reason=void 0):(a.status="failed",a.reason=A.message||"stage command failed",a.errorMessage=A.message),I+=1,!e$1.json){let f=P>0?Math.round(I/P*100):100,j=a.status==="passed"?D.green("\u2705"):D.red("\u274C");if(console.log(D.gray(`${j} [${I}/${P}] (${f}%) ${L} ${a.durationMs}ms`)),a.status==="failed"){a.reason&&console.log(D.red(`   Reason: ${a.reason}`)),a.executionCommand&&console.log(D.gray(`   Command: ${a.executionCommand}`));let W=Lt(a.runtimeDetected);W&&a.errorCategory==="setup"&&console.log(D.gray(`   Hint: ${W}`));}}};if(_&&R.length>1){let k=0,a=false,L=new Array(S).fill(null).map(async()=>{for(;k<R.length;){if(a&&!M)return;let E=k;k+=1;let N=R[E];await g(N),U.get(N)?.status==="failed"&&(a=true);}});if(await Promise.all(L),!M&&a){let E=false;for(let N of R){let T=U.get(N);if(T){if(T.status==="failed"){E=true;continue}E&&T.status==="skipped"&&(T.reason=T.reason||"stopped after failure");}}}}else for(let k of R){await g(k);let a=U.get(k);if(!M&&a?.status==="failed"){let L=R.slice(R.indexOf(k)+1);for(let E of L){let N=U.get(E);N&&(N.status="skipped",N.reason="stopped after failure");}break}}}let z=[];for(let g of s){let k=U.get(g);k&&z.push(k);}let V=z.filter(g=>g.status==="passed").length,J=z.filter(g=>g.status==="failed").length,b$1=z.filter(g=>g.status==="skipped").length;c({blockId:"workspace.run.execute",status:J>0?"failed":h?"blocked":"succeeded",message:`Workspace run finished: ${V} passed, ${J} failed, ${b$1} skipped`,component:"workspace-run",progress:{completed:P,total:P,percent:100},attributes:{passed:V,failed:J,skipped:b$1,stage:e$1.stage}});let $=e$1.strict===true,me=J>0||$&&v.some(g=>g.status==="fail"||g.status==="warn")?1:0,ee={schemaVersion:"1.0",workspacePath:t,stage:e$1.stage,generatedAt:new Date().toISOString(),durationMs:Date.now()-r,options:{affected:l,blastRadius:c$1,since:l?m:null,parallel:_,maxWorkers:S,continueOnError:M,strict:$,enforceGates:C,scope:i,reusePassed:e$1.reusePassed===true,planOnly:e$1.planOnly===true,runtime:e$1.runtime?.trim()||null},selection:{mode:x,since:l?m:null,scope:i,graphStatus:d$2,expansionDepth:w},gates:{enforced:C,results:v,blocked:!!h,blockingGate:h?.gate},summary:{projectCount:s.length,selectedCount:R.length,passed:V,failed:J,skipped:b$1,exitCode:me},projects:z,enterpriseControls:{jsonReady:true,evidencePath:b}},Se=y.join(t,b);c({blockId:"workspace.run.publish",status:"running",message:"Publishing workspace run evidence",component:"workspace.run"});try{await e(t,ee),c({blockId:"workspace.run.publish",status:"succeeded",message:"Workspace run evidence published",component:"workspace.run"}),d$1({workspacePath:t,relativePath:b,blockId:"workspace.run.publish"});}catch(g){throw c({blockId:"workspace.run.publish",status:"failed",message:g instanceof Error?g.message:"Workspace run evidence publish failed",component:"workspace.run"}),g}return e$1.json||(h&&(console.log(D.red(`\u274C Workspace run blocked by ${h.gate}`)),console.log(D.gray(`   ${h.summary}`))),console.log(D.cyan(`Workspace run (${e$1.stage}) => passed: ${V}, failed: ${J}, skipped: ${b$1}`)),console.log(D.gray(`Report: ${Se}`))),ee}export{It as a,Er as b};

package/dist/{chunk-J4J3RYCL.js → chunk-3RNWBFRP.js}

@@ -1,4 +1,4 @@
-import {a as a$1}from'./chunk-FIK343LI.js';import {c as c$1}from'./chunk-DT3LRKZQ.js';import {l,q}from'./chunk-36VNERGC.js';import {f,g,h as h$2}from'./chunk-G3ZC5W4U.js';import {a as a$3}from'./chunk-FS3WLRQ4.js';import {i,h as h$1,d,b as b$1,a as a$2,c as c$2,k as k$2}from'./chunk-BLEIUQL6.js';import {b as b$3}from'./chunk-VN2MKTQO.js';import {a}from'./chunk-AFIFZTOY.js';import {a as a$4}from'./chunk-XWKGZRHN.js';import {c,d as d$1}from'./chunk-EWZZUQBR.js';import {b as b$2}from'./chunk-25AWHAB5.js';import {h,i as i$1,m,k as k$1,n,o,g as g$1,l as l$1,j,s,e,f as f$1}from'./chunk-ODK4LCEL.js';import {a as a$5}from'./chunk-FB7SCXAZ.js';import {randomUUID,createHash}from'crypto';import P from'path';import T from'fs-extra';var rt=new Set(["committed","rejected","aborted","superseded"]);function p(e,t){if(!e)throw new Error(`Decision protocol violation: ${t}`)}function nt(e){return [...new Set(e)].sort()}function Ge(e,t){return t.digestCanonical(e.effects.map(a=>({id:a.id,status:a.status,key:a.idempotencyKey})))}function ze(e,t,a){p(!e.some(r=>r.id===t),`${a} receipt '${t}' already exists`);}function it(e,t){ze(e.effects,t.id,"effect");let a=e.effects.find(r=>r.idempotencyKey===t.idempotencyKey);return p(!a,`effect idempotency key '${t.idempotencyKey}' was already recorded by '${a?.id}'`),[...e.effects,t]}function st(e,t,a){return ze(e.verifications,t.id,"verification"),p(t.target.effectHeadDigest===Ge(e,a),`verification '${t.id}' does not bind the current effect head`),[...e.verifications,t]}function ot(e){return e.requiredCriteria.every(t=>{let a=e.verifications.filter(r=>r.criterionId===t);return a.length>0&&a.at(-1)?.status==="passed"})}function ct(e$1,t,a){if(t.kind==="created"){p(e$1===null,"created must be the first event");let w=t.payload.references?.[0];p(w,"created must bind an intent artifact");let u=t.payload.references?.filter(I=>I.role==="success-criterion").map(I=>I.artifact)??[];return {schemaVersion:e,id:t.transactionId,purpose:"proof-carrying-change",createdAt:t.occurredAt,updatedAt:t.occurredAt,state:"draft",generation:1,eventCount:t.sequence,eventHeadDigest:t.digest,intent:w,requiredCriteria:nt(u),scope:null,evidence:[],plans:[],authorization:null,effects:[],verifications:[],blockers:[]}}p(e$1,`${t.kind} cannot occur before created`),p(!rt.has(e$1.state),`${t.kind} cannot follow terminal state ${e$1.state}`);let r=e$1.state,n=e$1.scope,i=e$1.evidence,d=e$1.plans,f=e$1.authorization,l=e$1.effects,s=e$1.verifications,o=e$1.blockers,h=e$1.terminalReason;switch(t.kind){case "scope-bound":p(e$1.state==="draft"||e$1.state==="scoped","scope-bound requires draft or scoped state"),p(t.payload.scope,"scope-bound requires scope"),n=t.payload.scope,r="scoped";break;case "evidence-attached":p(e$1.state==="scoped"||e$1.state==="evidence-ready","evidence-attached requires scoped state"),p((t.payload.references?.length??0)>0,"evidence-attached requires references"),i=[...i,...t.payload.references??[]],r="evidence-ready";break;case "plan-attached":p(e$1.state==="evidence-ready","plan-attached requires evidence-ready state"),p((t.payload.references?.length??0)>0,"plan-attached requires references"),d=[...d,...t.payload.references??[]];break;case "authorized":p(e$1.state==="evidence-ready","authorization requires evidence-ready state"),p(t.payload.authorization,"authorized requires a bounded authorization grant"),f=t.payload.authorization,r="authorized";break;case "effect-requested":p(e$1.state==="authorized"||e$1.state==="executing","effect-requested requires authorization"),r="executing";break;case "effect-recorded":p(e$1.state==="authorized"||e$1.state==="executing","effect-recorded requires authorization"),p(t.payload.effect,"effect-recorded requires a receipt"),p(f?.effectClasses.includes(t.payload.effect.effectClass),`effect class '${t.payload.effect.effectClass}' is outside the authorization grant`),l=it(e$1,t.payload.effect),r=t.payload.effect.status==="succeeded"?"executing":"blocked",t.payload.effect.status!=="succeeded"&&(o=[...o,{code:t.payload.effect.status==="uncertain"?"decision.effect.uncertain":"decision.effect.failed",actionable:true,details:t.payload.effect.summary}]);break;case "effect-uncertain":p(e$1.state==="authorized"||e$1.state==="executing","effect-uncertain requires an active execution"),r="blocked",o=[...o,t.payload.blocker??{code:"decision.effect.uncertain",actionable:true}];break;case "verification-started":p(e$1.state==="authorized"||e$1.state==="executing","verification-started requires authorized or executing state"),r="verifying";break;case "verification-recorded":{p(e$1.state==="verifying","verification-recorded requires verifying state"),p(t.payload.verification,"verification-recorded requires a receipt"),s=st(e$1,t.payload.verification,a),r=t.payload.verification.status==="failed"?"blocked":t.payload.verification.status==="inconclusive"?"awaiting-human":"verifying";break}case "human-required":r="awaiting-human";break;case "blocked":p(t.payload.blocker,"blocked requires a structured blocker"),o=[...o,t.payload.blocker],r="blocked";break;case "resumed":p(e$1.state==="blocked"||e$1.state==="awaiting-human","resumed requires a paused state"),p(t.payload.resumeTo,"resumed requires an explicit target state"),r=t.payload.resumeTo,o=[];break;case "committed":p(e$1.state==="verifying","commit requires verifying state"),p(ot(e$1),"every required criterion needs a latest passing receipt"),p(!e$1.effects.some(w=>w.status!=="succeeded"),"all effects must be certainly successful"),r="committed",h=t.payload.reason??t.payload.summary;break;case "rejected":case "aborted":case "superseded":r=t.kind,h=t.payload.reason??t.payload.summary;break;default:throw new Error(`Decision protocol violation: unsupported event ${t.kind}`)}return {...e$1,updatedAt:t.occurredAt,state:r,generation:e$1.generation+1,eventCount:t.sequence,eventHeadDigest:t.digest,scope:n,evidence:i,plans:d,authorization:f,effects:l,verifications:s,blockers:o,...h?{terminalReason:h}:{}}}function qe(e,t,a,r){let n=(t?.sequence??0)+1,i={schemaVersion:f$1,transactionId:e,sequence:n,kind:a.kind,occurredAt:a.occurredAt,actor:a.actor,previousEventDigest:t?.digest??null,payload:a.payload};return {...i,digest:r.digestCanonical(i)}}function L(e,t){p(e.length>0,"at least one event is required");let a=null,r=null;for(let n of e){p(n.schemaVersion===f$1,`unsupported event schema ${n.schemaVersion}`),p(n.sequence===(r?.sequence??0)+1,`event sequence ${n.sequence} is not contiguous`),p(n.previousEventDigest===(r?.digest??null),`event ${n.sequence} has an invalid previous digest`);let{digest:i,...d}=n;p(n.digest===t.digestCanonical(d),`event ${n.sequence} digest is invalid`),p(!r||n.transactionId===r.transactionId,"events cross transaction boundaries"),a=ct(a,n,t),r=n;}return a}function ne(e,t,a){return {schemaVersion:g$1,transactionId:e.id,generatedAt:t,generation:e.generation,eventCount:e.eventCount,eventHeadDigest:e.eventHeadDigest,state:e.state,transactionDigest:a.digestCanonical(e)}}function U(e,t){return Ge(e,t)}var G={digestCanonical:c};function lt(e){let t=e.trim();if(!/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(t))throw new Error(`Invalid decision transaction id: ${e}`);return t}function N(e){let a=`.workspai/decisions/${lt(e)}`;return {directory:a,transaction:`${a}/transaction.json`,checkpoint:`${a}/checkpoint.json`,events:`${a}/events.jsonl`,lock:`${a}.lock`}}function ft(e,t){return e.split(/\r?\n/).filter(r=>r.trim().length>0).map((r,n)=>{try{return JSON.parse(r)}catch(i){throw new Error(`Decision event log is corrupt at ${t}:${n+1}: ${i.message}`)}})}async function Ne(e,t){let a=N(t),r=await b$1(e,a.events);return r?ft(await T.readFile(r,"utf8"),r):[]}function We(e,t){let a=N(t);return {directory:a$2(e,a.directory),transaction:a$2(e,a.transaction),checkpoint:a$2(e,a.checkpoint),events:a$2(e,a.events)}}async function gt(e,t,a$1,r){let n=N(t.id),i=ne(t,r,G);for(let[d,f]of a$1.entries())a(f,"contracts/workspace-intelligence/decision-event.v1.json",`Decision event ${d+1}`);return b$3(n.transaction,t),b$3(n.checkpoint,i),await k$2(e,n.events,`${a$1.map(d=>JSON.stringify(d)).join(`
+import {a as a$1}from'./chunk-FIK343LI.js';import {c as c$1}from'./chunk-KDVNRNDU.js';import {l,q}from'./chunk-G5UCEXP6.js';import {f,g,h as h$2}from'./chunk-SZHRPELL.js';import {a as a$3}from'./chunk-VWBWDDU2.js';import {i,h as h$1,d,b as b$1,a as a$2,c as c$2,k as k$2}from'./chunk-BLEIUQL6.js';import {b as b$3}from'./chunk-VN2MKTQO.js';import {a}from'./chunk-AFIFZTOY.js';import {a as a$4}from'./chunk-XWKGZRHN.js';import {c,d as d$1}from'./chunk-EWZZUQBR.js';import {b as b$2}from'./chunk-25AWHAB5.js';import {h,i as i$1,m,k as k$1,n,o,g as g$1,l as l$1,j,s,e,f as f$1}from'./chunk-ODK4LCEL.js';import {a as a$5}from'./chunk-FB7SCXAZ.js';import {randomUUID,createHash}from'crypto';import P from'path';import T from'fs-extra';var rt=new Set(["committed","rejected","aborted","superseded"]);function p(e,t){if(!e)throw new Error(`Decision protocol violation: ${t}`)}function nt(e){return [...new Set(e)].sort()}function Ge(e,t){return t.digestCanonical(e.effects.map(a=>({id:a.id,status:a.status,key:a.idempotencyKey})))}function ze(e,t,a){p(!e.some(r=>r.id===t),`${a} receipt '${t}' already exists`);}function it(e,t){ze(e.effects,t.id,"effect");let a=e.effects.find(r=>r.idempotencyKey===t.idempotencyKey);return p(!a,`effect idempotency key '${t.idempotencyKey}' was already recorded by '${a?.id}'`),[...e.effects,t]}function st(e,t,a){return ze(e.verifications,t.id,"verification"),p(t.target.effectHeadDigest===Ge(e,a),`verification '${t.id}' does not bind the current effect head`),[...e.verifications,t]}function ot(e){return e.requiredCriteria.every(t=>{let a=e.verifications.filter(r=>r.criterionId===t);return a.length>0&&a.at(-1)?.status==="passed"})}function ct(e$1,t,a){if(t.kind==="created"){p(e$1===null,"created must be the first event");let w=t.payload.references?.[0];p(w,"created must bind an intent artifact");let u=t.payload.references?.filter(I=>I.role==="success-criterion").map(I=>I.artifact)??[];return {schemaVersion:e,id:t.transactionId,purpose:"proof-carrying-change",createdAt:t.occurredAt,updatedAt:t.occurredAt,state:"draft",generation:1,eventCount:t.sequence,eventHeadDigest:t.digest,intent:w,requiredCriteria:nt(u),scope:null,evidence:[],plans:[],authorization:null,effects:[],verifications:[],blockers:[]}}p(e$1,`${t.kind} cannot occur before created`),p(!rt.has(e$1.state),`${t.kind} cannot follow terminal state ${e$1.state}`);let r=e$1.state,n=e$1.scope,i=e$1.evidence,d=e$1.plans,f=e$1.authorization,l=e$1.effects,s=e$1.verifications,o=e$1.blockers,h=e$1.terminalReason;switch(t.kind){case "scope-bound":p(e$1.state==="draft"||e$1.state==="scoped","scope-bound requires draft or scoped state"),p(t.payload.scope,"scope-bound requires scope"),n=t.payload.scope,r="scoped";break;case "evidence-attached":p(e$1.state==="scoped"||e$1.state==="evidence-ready","evidence-attached requires scoped state"),p((t.payload.references?.length??0)>0,"evidence-attached requires references"),i=[...i,...t.payload.references??[]],r="evidence-ready";break;case "plan-attached":p(e$1.state==="evidence-ready","plan-attached requires evidence-ready state"),p((t.payload.references?.length??0)>0,"plan-attached requires references"),d=[...d,...t.payload.references??[]];break;case "authorized":p(e$1.state==="evidence-ready","authorization requires evidence-ready state"),p(t.payload.authorization,"authorized requires a bounded authorization grant"),f=t.payload.authorization,r="authorized";break;case "effect-requested":p(e$1.state==="authorized"||e$1.state==="executing","effect-requested requires authorization"),r="executing";break;case "effect-recorded":p(e$1.state==="authorized"||e$1.state==="executing","effect-recorded requires authorization"),p(t.payload.effect,"effect-recorded requires a receipt"),p(f?.effectClasses.includes(t.payload.effect.effectClass),`effect class '${t.payload.effect.effectClass}' is outside the authorization grant`),l=it(e$1,t.payload.effect),r=t.payload.effect.status==="succeeded"?"executing":"blocked",t.payload.effect.status!=="succeeded"&&(o=[...o,{code:t.payload.effect.status==="uncertain"?"decision.effect.uncertain":"decision.effect.failed",actionable:true,details:t.payload.effect.summary}]);break;case "effect-uncertain":p(e$1.state==="authorized"||e$1.state==="executing","effect-uncertain requires an active execution"),r="blocked",o=[...o,t.payload.blocker??{code:"decision.effect.uncertain",actionable:true}];break;case "verification-started":p(e$1.state==="authorized"||e$1.state==="executing","verification-started requires authorized or executing state"),r="verifying";break;case "verification-recorded":{p(e$1.state==="verifying","verification-recorded requires verifying state"),p(t.payload.verification,"verification-recorded requires a receipt"),s=st(e$1,t.payload.verification,a),r=t.payload.verification.status==="failed"?"blocked":t.payload.verification.status==="inconclusive"?"awaiting-human":"verifying";break}case "human-required":r="awaiting-human";break;case "blocked":p(t.payload.blocker,"blocked requires a structured blocker"),o=[...o,t.payload.blocker],r="blocked";break;case "resumed":p(e$1.state==="blocked"||e$1.state==="awaiting-human","resumed requires a paused state"),p(t.payload.resumeTo,"resumed requires an explicit target state"),r=t.payload.resumeTo,o=[];break;case "committed":p(e$1.state==="verifying","commit requires verifying state"),p(ot(e$1),"every required criterion needs a latest passing receipt"),p(!e$1.effects.some(w=>w.status!=="succeeded"),"all effects must be certainly successful"),r="committed",h=t.payload.reason??t.payload.summary;break;case "rejected":case "aborted":case "superseded":r=t.kind,h=t.payload.reason??t.payload.summary;break;default:throw new Error(`Decision protocol violation: unsupported event ${t.kind}`)}return {...e$1,updatedAt:t.occurredAt,state:r,generation:e$1.generation+1,eventCount:t.sequence,eventHeadDigest:t.digest,scope:n,evidence:i,plans:d,authorization:f,effects:l,verifications:s,blockers:o,...h?{terminalReason:h}:{}}}function qe(e,t,a,r){let n=(t?.sequence??0)+1,i={schemaVersion:f$1,transactionId:e,sequence:n,kind:a.kind,occurredAt:a.occurredAt,actor:a.actor,previousEventDigest:t?.digest??null,payload:a.payload};return {...i,digest:r.digestCanonical(i)}}function L(e,t){p(e.length>0,"at least one event is required");let a=null,r=null;for(let n of e){p(n.schemaVersion===f$1,`unsupported event schema ${n.schemaVersion}`),p(n.sequence===(r?.sequence??0)+1,`event sequence ${n.sequence} is not contiguous`),p(n.previousEventDigest===(r?.digest??null),`event ${n.sequence} has an invalid previous digest`);let{digest:i,...d}=n;p(n.digest===t.digestCanonical(d),`event ${n.sequence} digest is invalid`),p(!r||n.transactionId===r.transactionId,"events cross transaction boundaries"),a=ct(a,n,t),r=n;}return a}function ne(e,t,a){return {schemaVersion:g$1,transactionId:e.id,generatedAt:t,generation:e.generation,eventCount:e.eventCount,eventHeadDigest:e.eventHeadDigest,state:e.state,transactionDigest:a.digestCanonical(e)}}function U(e,t){return Ge(e,t)}var G={digestCanonical:c};function lt(e){let t=e.trim();if(!/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(t))throw new Error(`Invalid decision transaction id: ${e}`);return t}function N(e){let a=`.workspai/decisions/${lt(e)}`;return {directory:a,transaction:`${a}/transaction.json`,checkpoint:`${a}/checkpoint.json`,events:`${a}/events.jsonl`,lock:`${a}.lock`}}function ft(e,t){return e.split(/\r?\n/).filter(r=>r.trim().length>0).map((r,n)=>{try{return JSON.parse(r)}catch(i){throw new Error(`Decision event log is corrupt at ${t}:${n+1}: ${i.message}`)}})}async function Ne(e,t){let a=N(t),r=await b$1(e,a.events);return r?ft(await T.readFile(r,"utf8"),r):[]}function We(e,t){let a=N(t);return {directory:a$2(e,a.directory),transaction:a$2(e,a.transaction),checkpoint:a$2(e,a.checkpoint),events:a$2(e,a.events)}}async function gt(e,t,a$1,r){let n=N(t.id),i=ne(t,r,G);for(let[d,f]of a$1.entries())a(f,"contracts/workspace-intelligence/decision-event.v1.json",`Decision event ${d+1}`);return b$3(n.transaction,t),b$3(n.checkpoint,i),await k$2(e,n.events,`${a$1.map(d=>JSON.stringify(d)).join(`
 `)}
 `),await h$1(e,n.transaction,t),await h$1(e,n.checkpoint,i),{transaction:t,checkpoint:i,events:a$1,paths:We(e,t.id)}}async function Me(e){let t=N(e.transactionId),a=a$2(e.workspacePath,t.lock);return a$4(a,async()=>{let r=await Ne(e.workspacePath,e.transactionId),n=r.at(-1)??null;if((n?.digest??null)!==e.expectedHeadDigest)throw new Error(`Decision transaction head changed: expected ${e.expectedHeadDigest??"<empty>"}, observed ${n?.digest??"<empty>"}`);r.length>0&&L(r,G);let i=qe(e.transactionId,n,e.event,G),d=[...r,i],f=L(d,G);return gt(e.workspacePath,f,d,e.event.occurredAt)},{purpose:`decision:${e.transactionId}`,timeoutMs:3e4,staleMs:6e4})}async function Be(e,t){let a=await Ne(e,t);if(a.length===0)throw new Error(`Decision transaction not found: ${t}`);let r=L(a,G),n=ne(r,r.updatedAt,G);return {transaction:r,checkpoint:n,events:a,paths:We(e,t)}}function W(e){return N(e).directory}var oe={digestCanonical:c},pt="workspai.deleted-artifact-tombstone.v1";function ut(e){let t=e.trim();if(!/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(t))throw new Error(`Invalid proof-carrying change id: ${e}`);return t}function E(e){let a=`.workspai/changes/${ut(e)}`;return {directory:a,lease:`${a}/lease.json`,prediction:`${a}/predicted-overlay.json`,actualOverlay:`${a}/actual-overlay.json`,surprises:`${a}/architecture-surprises.json`,workspaceVerification:`${a}/verification/workspace-verify.json`,capsule:`${a}/capsule.json`,privateBaselineGraph:`${a}/private/baseline-graph.json`}}function mt(e,t){return {kind:e,id:t}}function x(e){return {role:e.role,artifact:e.artifact,schemaVersion:e.schemaVersion,digest:{algorithm:"sha256",semantics:e.semantics??"canonical-json-v1",value:e.value}}}async function A(e,t){let a=await b$1(e,t);return a?await T.readJson(a):null}async function Fe(e,t){let a=await d(e,C(t));return !a||!(await T.stat(a).catch(()=>null))?.isFile()?null:createHash("sha256").update(await T.readFile(a)).digest("hex")}async function yt(e,t){let a=new Map;await Promise.all(t.proofs.map(async n=>{let i=C(n.artifact),d=a.get(i);d||(d=Fe(e,i),a.set(i,d)),await d;}));let r=Object.fromEntries((await Promise.all([...a.entries()].map(async([n,i])=>[n,await i]))).filter(n=>typeof n[1]=="string"));return {...t,pccArtifactContentHashes:r}}async function wt(e){let a=(await A(e,s.workspaceContract.artifactPath))?.workspace?.name;if(typeof a=="string"&&a.trim())return a.trim();let r=await A(e,".workspai/workspace.json"),n=r?.workspace_name??r?.name;return typeof n=="string"&&n.trim()?n.trim():P.basename(e)}async function ce(e,t){let a=await c$2(e,t.artifact);if(!a)return  false;if(t.digest.semantics==="raw-bytes-v1"){let i=await T.readFile(a);return createHash("sha256").update(i).digest("hex")===t.digest.value}let r=await T.readJson(a).catch(()=>null);return r?(t.digest.semantics==="workspace-model-structural-v1"?d$1(r):c(r))===t.digest.value:false}function Je(e){return c({schemaVersion:pt,artifact:C(e),deleted:true})}function vt(e){let t=C(e.artifact);if(!t||t==="."||t===".."||t.startsWith("../"))throw new Error(`Deleted artifact identity must be a contained relative path: ${e.artifact}`);return {artifact:t,observedAt:e.observedAt??new Date().toISOString(),digest:{algorithm:"sha256",semantics:"deletion-tombstone-v1",value:Je(t)}}}async function Ye(e,t){if(t.digest.algorithm!=="sha256"||t.digest.semantics!=="deletion-tombstone-v1"||t.digest.value!==Je(t.artifact))return  false;let a=await d(e,t.artifact);return a!==null&&!await T.pathExists(a)}async function kt(e,t){let a=await A(e,E(t).lease);if(!a||a.schemaVersion!==h)throw new Error(`Architecture lease is missing or unsupported for ${t}.`);if(a.changeId!==t)throw new Error(`Architecture lease binding failed for ${t}.`);return a}async function J(e){let t=await a$3(e);if(t.status==="miss")throw new Error(`A current canonical Model and Graph are required (${t.reason}). Run workspai workspace intelligence run --for-agent generic --strict --json.`);return t}function Ct(e,t,a){return c({modelHash:e,graphHash:t,inputHash:a})}function Y(e){let t=d$1(e.model),a=c(e.graph),r=e.graph.source.inputs?.hash;if(!r)throw new Error("The canonical Graph has no live input fingerprint.");return {modelHash:t,graphHash:a,inputHash:r,generation:Ct(t,a,r)}}async function de(e,t){let a=await J(e),r=Y(a);if(r.generation!==t.generation)throw new Error(`Architecture lease ${t.changeId} is stale. Expected generation ${t.generation}, observed ${r.generation}. Abort or begin a new change from current evidence.`);return a}function v(e,t,a,r,n=new Date().toISOString()){return {kind:e,payload:t,occurredAt:n,actor:mt(a,r)}}async function k(e,t,a,r){return Me({workspacePath:e,transactionId:a,expectedHeadDigest:t?.transaction.eventHeadDigest??null,event:r})}function b(e,t,a){return `${e}\0${t}\0${a}`}function It(e){let t=[];for(let[a,r]of [["entity",e.entities],["relation",e.relations],["proof",e.proofs]])t.push(...r.added.map(n=>({operation:"add",targetKind:a,targetId:n.id}))),t.push(...r.removed.map(n=>({operation:"remove",targetKind:a,targetId:n.id}))),t.push(...r.changed.map(n=>({operation:"change",targetKind:a,targetId:n.id})));return t.push(...e.changedArtifacts.map(a=>({operation:"change",targetKind:"artifact",targetId:a}))),t.sort((a,r)=>b(a.operation,a.targetKind,a.targetId).localeCompare(b(r.operation,r.targetKind,r.targetId)))}function Pt(e,t){let a=new Set(t.filter(s=>s.targetKind==="artifact").map(s=>C(s.targetId)));if(a.size===0)return new Set;let r=new Set,n=new Set,i=(s,o)=>{a.has(C(o.artifact))&&(n.add(o.id),r.add(b(s,"proof",o.id)));};e.proofs.added.forEach(s=>i("add",s)),e.proofs.removed.forEach(s=>i("remove",s)),e.proofs.changed.forEach(s=>{let o=s.after??s.before;o&&i("change",o);});let d=new Set,f=(s,o)=>{o.proofIds.some(h=>n.has(h))&&(d.add(o.id),r.add(b(s,"entity",o.id)));};e.entities.added.forEach(s=>f("add",s)),e.entities.removed.forEach(s=>f("remove",s)),e.entities.changed.forEach(s=>{let o=s.after??s.before;o&&f("change",o);});let l=(s,o)=>{!o.proofIds.some(h=>n.has(h))&&!d.has(o.from)&&!d.has(o.to)||r.add(b(s,"relation",o.id));};return e.relations.added.forEach(s=>l("add",s)),e.relations.removed.forEach(s=>l("remove",s)),e.relations.changed.forEach(s=>{let o=s.after??s.before;o&&l("change",o);}),r}function bt(e){let t=e.prediction?.operations.map(o=>({operation:o.operation,targetKind:o.targetKind,targetId:o.targetId}))??[],a=It(e.actual),r=new Set(t.map(o=>b(o.operation,o.targetKind,o.targetId))),n=new Set(a.map(o=>b(o.operation,o.targetKind,o.targetId))),i=Pt(e.actual,t),d=a.filter(o=>r.has(b(o.operation,o.targetKind,o.targetId))||i.has(b(o.operation,o.targetKind,o.targetId))),f=a.filter(o=>!r.has(b(o.operation,o.targetKind,o.targetId))&&!i.has(b(o.operation,o.targetKind,o.targetId))),l=t.filter(o=>!n.has(b(o.operation,o.targetKind,o.targetId))),s=e.prediction?f.length===0&&l.length===0&&i.size===0?"exact":f.length===0?"within-expectation":"surprising":"no-prediction";return {schemaVersion:j,changeId:e.changeId,generatedAt:e.generatedAt,prediction:e.predictionReference,actual:e.actualReference,matched:d,unpredicted:f,missing:l,summary:{predicted:t.length,actual:a.length,matched:d.length,unpredicted:f.length,missing:l.length,verdict:s}}}async function ie(e){let t=await A(e.workspacePath,e.relativePath);return t?x({role:e.role,artifact:e.relativePath,schemaVersion:e.schemaVersion,value:c(t)}):null}function At(e){let{integrity:t,...a}=e;return a}async function le(e){let t=E(e.lease.changeId),[a,r,n]=await Promise.all([ie({workspacePath:e.workspacePath,relativePath:t.prediction,role:"prediction",schemaVersion:i$1}),ie({workspacePath:e.workspacePath,relativePath:t.actualOverlay,role:"actual-architecture-overlay",schemaVersion:a$5}),ie({workspacePath:e.workspacePath,relativePath:t.surprises,role:"architecture-surprises",schemaVersion:j})]),i=x({role:"decision-transaction",artifact:`${W(e.lease.changeId)}/transaction.json`,schemaVersion:e.record.transaction.schemaVersion,value:c(e.record.transaction)}),d=e.record.transaction.effects.flatMap(g=>g.artifacts),f=e.record.transaction.effects.flatMap(g=>g.deletedArtifacts??[]),l=e.record.transaction.verifications.flatMap(g=>g.artifacts),s=await A(e.workspacePath,t.actualOverlay),o=s?!se(s):false,h=[{id:"intent-bound",status:"passed",summary:"The transaction is hash-bound to its immutable Goal Pack."},{id:"baseline-pinned",status:"passed",summary:"The architecture lease pins exact Model, Graph, and live-input identities."},{id:"effects-receipted",status:e.record.transaction.effects.length>0&&e.record.transaction.effects.every(g=>g.status==="succeeded")||e.record.transaction.effects.length===0&&o?"passed":e.record.transaction.effects.length===0?"pending":"failed",summary:e.record.transaction.effects.length===0&&o?"Fresh Graph observation proves this was a no-effect change.":`${e.record.transaction.effects.length} typed effect receipt(s) are bound to the transaction ledger.`},{id:"architecture-reobserved",status:r?"passed":"pending",summary:r?"The actual architecture delta was derived from a fresh canonical Graph.":"No post-effect architecture overlay has been observed yet."},{id:"independently-verified",status:e.record.transaction.state==="committed"?"passed":e.record.transaction.verifications.some(g=>g.status==="failed")?"failed":"pending",summary:`${e.record.transaction.verifications.length} independent verification receipt(s) are recorded.`}],w=await A(e.workspacePath,t.surprises),u=[...e.record.transaction.effects.length===0&&s&&se(s)?["No typed effect receipt explains the observed architecture generation."]:[],...w?.summary.unpredicted?[`${w.summary.unpredicted} actual architecture operation(s) were not predicted.`]:[],...e.record.transaction.blockers.map(g=>g.details??g.code)],I=e.record.transaction.state==="committed"?"sealed":e.record.transaction.state==="aborted"?"aborted":e.record.transaction.state==="blocked"||e.record.transaction.state==="awaiting-human"?"blocked":e.record.transaction.state==="verifying"&&e.record.transaction.verifications.some(g=>g.status==="passed")?"verified":"open",c$1={schemaVersion:k$1,changeId:e.lease.changeId,goalId:e.lease.goalId,generatedAt:e.record.transaction.updatedAt,status:I,workspace:e.lease.workspace,scope:e.lease.scope,decision:{transaction:i,eventHeadDigest:e.record.transaction.eventHeadDigest,effectHeadDigest:U(e.record.transaction,oe),state:e.record.transaction.state,generation:e.record.transaction.generation},intent:e.record.transaction.intent,baseline:e.lease.baseline,prediction:a,actualOverlay:r,surpriseReport:n,effects:d,deletedArtifacts:f,verification:l,assurances:h,remainingUncertainty:[...new Set(u)]};return {...c$1,integrity:{algorithm:"sha256",semantics:"canonical-json-v1",capsuleDigest:c(c$1)}}}async function S(e,t,a){let r=await le({workspacePath:e,lease:t,record:a});return await h$1(e,E(t.changeId).capsule,r),r}function V(e){let t=E(e.lease.changeId),a$1={schemaVersion:l$1,operation:e.operation,changeId:e.lease.changeId,state:e.record.transaction.state,capsule:e.capsule,artifacts:{lease:t.lease,prediction:e.capsule.prediction?.artifact??null,actualOverlay:e.capsule.actualOverlay?.artifact??null,surpriseReport:e.capsule.surpriseReport?.artifact??null,transaction:`${W(e.lease.changeId)}/transaction.json`,events:`${W(e.lease.changeId)}/events.jsonl`,capsule:t.capsule},nextActions:e.nextActions};return a(a$1,"contracts/workspace-intelligence/change-operation-result.v1.json","Proof-Carrying Change operation result"),b$2({kind:"operation.completed",status:e.record.transaction.state==="blocked"||e.record.transaction.state==="awaiting-human"?"blocked":e.record.transaction.state==="aborted"?"cancelled":"succeeded",component:"proof-carrying-change",correlationId:e.lease.changeId,message:`${e.operation}: ${e.record.transaction.state}`,evidenceBindings:[{kind:"artifact",ref:t.capsule,role:"output",provenance:"authoritative"},{kind:"artifact",ref:`${W(e.lease.changeId)}/transaction.json`,role:"subject",provenance:"authoritative"}],attributes:{operation:e.operation,changeId:e.lease.changeId,goalId:e.lease.goalId,decisionState:e.record.transaction.state,assurancePassed:e.capsule.assurances.filter(r=>r.status==="passed").length,assuranceTotal:e.capsule.assurances.length}}),a$1}async function R(e,t){let a=await kt(e,t),r=await Be(e,t);return {lease:a,record:r}}async function sa(e){let t=P.resolve(e.workspacePath),a=await l({workspacePath:t,goalId:e.goalId,validateBindings:true}),r=a.goalPack;if(!r||!a.active)throw new Error("No active Goal Pack is available, or the named Goal is not active.");if(r.state!=="ready-to-plan")throw new Error(`Goal ${r.id} cannot begin a change while its state is ${r.state}.`);let n=await J(t),i$1=Y(n);if(i$1.modelHash!==r.sourceBinding.model.hash||(r.sourceBinding.graph.inputHash?i$1.inputHash!==r.sourceBinding.graph.inputHash:i$1.graphHash!==r.sourceBinding.graph.hash))throw new Error(`Goal ${r.id} is no longer bound to the current architecture generation.`);let d=`change-${r.intent.category}-${randomUUID().replace(/-/g,"").slice(0,16)}`,f=E(d),l$1=new Date().toISOString(),s=await yt(t,n.graph),o=c(s),h$1={schemaVersion:h,changeId:d,goalId:r.id,createdAt:l$1,workspace:r.workspace,scope:{kind:r.scope.kind,projects:[...r.scope.projects]},baseline:{model:x({role:"baseline-model",artifact:r.sourceBinding.model.artifact,schemaVersion:r.sourceBinding.model.schemaVersion,value:r.sourceBinding.model.hash,semantics:"workspace-model-structural-v1"}),graph:{...x({role:"baseline-graph",artifact:r.sourceBinding.graph.artifact,schemaVersion:r.sourceBinding.graph.schemaVersion,value:i$1.graphHash}),inputHash:i$1.inputHash}},generation:i$1.generation,semantics:"optimistic-generation-guard",privateMaterialization:{artifact:f.privateBaselineGraph,role:"hash-bound-baseline-cache",portable:false,authoritative:false,digest:{algorithm:"sha256",semantics:"canonical-json-v1",value:o}}};await i(t,f.lease,[{relativePath:f.privateBaselineGraph,payload:s},{relativePath:f.lease,payload:h$1}]);let w=e.actorKind??"cli",u=e.actorId??"workspai-change",I=x({role:"intent",artifact:a.active.goalPack,schemaVersion:r.schemaVersion,value:c(r)}),c$1=r.successCriteria.map(j=>x({role:"success-criterion",artifact:j.id,schemaVersion:"workspai.goal-success-criterion.v1",value:c(j)})),g=await k(t,null,d,v("created",{summary:`Begin proof-carrying change for ${r.id}.`,references:[I,...c$1]},w,u,l$1));g=await k(t,g,d,v("scope-bound",{summary:"Bind immutable Goal scope.",scope:h$1.scope},w,u)),g=await k(t,g,d,v("evidence-attached",{summary:"Attach exact architecture generation and lease.",references:[h$1.baseline.model,{role:h$1.baseline.graph.role,artifact:h$1.baseline.graph.artifact,schemaVersion:h$1.baseline.graph.schemaVersion,digest:h$1.baseline.graph.digest},x({role:"architecture-lease",artifact:f.lease,schemaVersion:h$1.schemaVersion,value:c(h$1)})]},w,u)),await q({workspacePath:t,goalId:r.id,changeId:d});let D=await S(t,h$1,g);return V({operation:"begin",lease:h$1,record:g,capsule:D,nextActions:[`workspai change predict --change ${d} --file <prediction.json> --json`,`workspai change authorize --change ${d} --effects filesystem,command --json`]})}async function oa(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId);if(await de(e.workspacePath,t),a.transaction.state!=="evidence-ready")throw new Error(`Prediction requires evidence-ready state, observed ${a.transaction.state}.`);let r={...e.prediction,schemaVersion:i$1,changeId:e.changeId,goalId:t.goalId,baselineGeneration:t.generation,nonCanonical:true,proofEligible:false,operations:[...e.prediction.operations].sort((f,l)=>b(f.operation,f.targetKind,f.targetId).localeCompare(b(l.operation,l.targetKind,l.targetId)))};await h$1(e.workspacePath,E(e.changeId).prediction,r);let n=x({role:"noncanonical-prediction",artifact:E(e.changeId).prediction,schemaVersion:r.schemaVersion,value:c(r)}),i=await k(e.workspacePath,a,e.changeId,v("plan-attached",{summary:"Attach an explicitly noncanonical architecture prediction.",references:[n]},e.actorKind??"agent",e.actorId??"workspai-agent")),d=await S(e.workspacePath,t,i);return V({operation:"predict",lease:t,record:i,capsule:d,nextActions:[`workspai change authorize --change ${e.changeId} --effects filesystem,command --json`]})}async function ca(e){let{lease:t,record:a$1}=await R(e.workspacePath,e.changeId);if(await de(e.workspacePath,t),a$1.transaction.state!=="evidence-ready")throw new Error(`Plan attachment requires evidence-ready state, observed ${a$1.transaction.state}.`);let r=e.role.trim().toLowerCase();if(!/^[a-z0-9](?:[a-z0-9.-]{0,62}[a-z0-9])?$/.test(r))throw new Error(`Invalid proof-carrying plan role: ${e.role}`);if(!e.schemaVersion.trim())throw new Error("Plan schema version is required.");let n=e.contractPath.replace(/\\/g,"/");if(!n.startsWith("contracts/")||n.split("/").some(l=>l===".."||l==="."))throw new Error(`Plan contract path must resolve inside the published contract root: ${e.contractPath}`);if(!e.payload||typeof e.payload!="object"||e.payload.schemaVersion!==e.schemaVersion)throw new Error("Plan payload schema version does not match its PCC reference.");a(e.payload,n,`${r} plan`);let i=c(e.payload),d=`${E(e.changeId).directory}/plans/${r}-${i}.json`;await h$1(e.workspacePath,d,e.payload);let f=await k(e.workspacePath,a$1,e.changeId,v("plan-attached",{summary:`Attach ${r} execution plan.`,references:[x({role:r,artifact:d,schemaVersion:e.schemaVersion,value:i})]},e.actorKind??"cli",e.actorId??"workspai-plan"));return await S(e.workspacePath,t,f),{changeId:e.changeId,state:f.transaction.state,artifact:d,digest:i}}async function da(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId);if(await de(e.workspacePath,t),e.effectClasses.length===0)throw new Error("Authorization requires at least one effect class.");let r=await k(e.workspacePath,a,e.changeId,v("authorized",{summary:`Authorize bounded effect classes: ${e.effectClasses.join(", ")}.`,authorization:{grantedBy:e.grantedBy,grant:"bounded-effects",effectClasses:[...new Set(e.effectClasses)].sort()}},e.actorKind??"human",e.grantedBy)),n=await S(e.workspacePath,t,r);return V({operation:"authorize",lease:t,record:r,capsule:n,nextActions:[`workspai change effect record --change ${e.changeId} --file <effect-receipt.json> --json`,`workspai change verify --change ${e.changeId} --json`]})}async function la(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId);if(a.transaction.state!=="blocked"&&a.transaction.state!=="awaiting-human")throw new Error(`Resume requires blocked or awaiting-human state, observed ${a.transaction.state}.`);let r=await k(e.workspacePath,a,e.changeId,v("resumed",{summary:e.reason,reason:e.reason,resumeTo:e.resumeTo},"human",e.actorId)),n=await S(e.workspacePath,t,r);return V({operation:"resume",lease:t,record:r,capsule:n,nextActions:e.resumeTo==="verifying"?[`workspai change verification record --change ${e.changeId} --file <verification-receipt.json> --json`]:[`workspai change effect record --change ${e.changeId} --file <effect-receipt.json> --json`]})}async function fa(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId),r=new Set(e.receipt.artifacts.map(f=>C(f.artifact))),n=(e.receipt.deletedArtifacts??[]).map(f=>C(f.artifact));if(new Set(n).size!==n.length)throw new Error("Effect receipt contains duplicate deleted-artifact identities.");if(n.some(f=>r.has(f)))throw new Error("An effect artifact cannot be both present and deleted in one receipt.");if(n.length>0&&e.receipt.status!=="succeeded")throw new Error("Only a succeeded effect may carry deleted-artifact tombstones.");for(let f of e.receipt.artifacts)if(!await ce(e.workspacePath,f))throw new Error(`Effect artifact is missing or corrupt: ${f.artifact}`);for(let f of e.receipt.deletedArtifacts??[])if(!await Ye(e.workspacePath,f))throw new Error(`Deleted effect artifact is present, outside the governed scope, or has an invalid tombstone: ${f.artifact}`);let i=await k(e.workspacePath,a,e.changeId,v("effect-recorded",{summary:e.receipt.summary,effect:e.receipt},e.actorKind??"agent",e.actorId??"workspai-agent")),d=await S(e.workspacePath,t,i);return V({operation:"effect-record",lease:t,record:i,capsule:d,nextActions:i.transaction.state==="blocked"?[`workspai change status --change ${e.changeId} --json`]:[`workspai change verify --change ${e.changeId} --json`]})}async function ga(e){let t=P.resolve(e.workspacePath),{lease:a,record:r}=await R(t,e.changeId);if(!r.transaction.requiredCriteria.includes(e.receipt.criterionId))throw new Error(`Verification criterion '${e.receipt.criterionId}' is outside the immutable Goal contract.`);let n=await J(t),i=E(e.changeId),[d,f]=await Promise.all([A(t,i.actualOverlay),A(t,i.surprises)]),l=r.transaction.verifications.some(c=>c.criterionId==="workspace-verify"&&c.status==="passed");if(!d||!f||!l)throw new Error("Domain verification can be admitted only after change verify re-observes the Graph and records a passing Workspace Verify receipt.");let s=Y(n),o=U(r.transaction,oe);if(e.receipt.target.modelHash!==s.modelHash||e.receipt.target.graphHash!==s.graphHash||e.receipt.target.effectHeadDigest!==o)throw new Error("Verification receipt does not target the current Model, Graph, and effect head.");for(let c of e.receipt.artifacts)if(!await ce(t,c))throw new Error(`Verification artifact is missing or corrupt: ${c.artifact}`);let h=e.actorKind??"ci",w=e.actorId??"workspai-verifier",u=r;if(u.transaction.state==="blocked"){if(!u.transaction.blockers.every(g=>g.code==="change.verification.criteria_missing"))throw new Error("The change is blocked by a condition that a verification receipt cannot resume.");u=await k(t,u,e.changeId,v("resumed",{summary:"Resume to admit a missing verification receipt.",resumeTo:"verifying"},h,w));}else if(u.transaction.state!=="verifying")throw new Error(`Verification receipt requires verifying or criteria-blocked state; observed ${u.transaction.state}.`);u=await k(t,u,e.changeId,v("verification-recorded",{summary:e.receipt.summary,verification:e.receipt},h,w)),u.transaction.state==="verifying"&&u.transaction.requiredCriteria.every(g=>u.transaction.verifications.filter(j=>j.criterionId===g).at(-1)?.status==="passed")&&(u=await k(t,u,e.changeId,v("committed",{summary:"Seal the independently verified proof-carrying change."},h,w)));let I=await S(t,a,u);return V({operation:"verification-record",lease:a,record:u,capsule:I,nextActions:u.transaction.state==="committed"?[`workspai change capsule validate --change ${e.changeId} --json`]:[`workspai change status --change ${e.changeId} --json`]})}function F(e,t,a,r="verification"){return x({role:r,artifact:e,schemaVersion:t,value:c(a)})}function se(e){return e.summary.entityAdds+e.summary.entityRemovals+e.summary.entityChanges+e.summary.relationAdds+e.summary.relationRemovals+e.summary.relationChanges+e.summary.proofAdds+e.summary.proofRemovals+e.summary.proofChanges>0}function C(e){return e.replace(/\\/g,"/").replace(/^\.\//,"")}function Et(e){if(e.scope.kind==="workspace")return e.overlay;let t=new Set(e.scope.projects),a=c=>!!(c.projectId&&t.has(c.projectId)),r={added:e.overlay.entities.added.filter(a),removed:e.overlay.entities.removed.filter(a),changed:e.overlay.entities.changed.filter(c=>a(c.after??c.before??{}))},n=c=>e.scopedEntityIds.has(c.from)||e.scopedEntityIds.has(c.to),i={added:e.overlay.relations.added.filter(n),removed:e.overlay.relations.removed.filter(n),changed:e.overlay.relations.changed.filter(c=>{let g=c.after??c.before;return !!(g&&n(g))})},d=new Set([...r.added.flatMap(c=>c.proofIds),...r.removed.flatMap(c=>c.proofIds),...r.changed.flatMap(c=>[...c.before?.proofIds??[],...c.after?.proofIds??[]]),...i.added.flatMap(c=>c.proofIds),...i.removed.flatMap(c=>c.proofIds),...i.changed.flatMap(c=>[...c.before?.proofIds??[],...c.after?.proofIds??[]])]),f=c=>{let g=C(c);return e.projectPrefixes.includes(".")?true:e.projectPrefixes.some(D=>g===D||g.startsWith(`${D}/`))},l=c=>d.has(c.id)||f(c.artifact),s={added:e.overlay.proofs.added.filter(l),removed:e.overlay.proofs.removed.filter(l),changed:e.overlay.proofs.changed.filter(c=>{let g=c.after??c.before;return !!(g&&l(g))})},o=e.overlay.impactedEntityIds.filter(c=>e.scopedEntityIds.has(c)),h=e.overlay.changedArtifacts.filter(f),w=r.removed.length+i.removed.length+s.removed.length,u=w+r.added.length+r.changed.length+i.added.length+i.changed.length+s.added.length+s.changed.length,I=u===0?"none":w>0||o.length>=10?"high":o.length>=5||u>=5?"medium":"low";return {...e.overlay,entities:r,relations:i,proofs:s,impactedEntityIds:o,changedArtifacts:h,summary:{entityAdds:r.added.length,entityRemovals:r.removed.length,entityChanges:r.changed.length,relationAdds:i.added.length,relationRemovals:i.removed.length,relationChanges:i.changed.length,proofAdds:s.added.length,proofRemovals:s.removed.length,proofChanges:s.changed.length,impactedEntities:o.length,changedArtifacts:h.length,risk:I}}}function Le(e){let t=P.normalize(P.resolve(e));return process.platform==="win32"?t.toLowerCase():t}async function Dt(e){let t=new Set(e.receiptedArtifacts.map(C)),a=new Set;for(let n of t){let i=await d(e.workspacePath,n);i&&a.add(Le(i));}let r=[];for(let n of e.changedArtifacts){let i=C(n);if(t.has(i))continue;let d$1=await d(e.workspacePath,i);d$1&&a.has(Le(d$1))||r.push(n);}return r}function Rt(e){let t=C(e.artifact);return e.receiptedArtifacts.has(t)||e.scope.kind==="workspace"||e.projectPrefixes.includes(".")?true:e.projectPrefixes.some(a=>t===a||t.startsWith(`${a}/`))}async function $t(e){let t=C(e.artifact),a=f=>{let l=f.proofs.filter(s=>C(s.artifact)===t);return l.length===0?[]:l.some(s=>!s.contentHash)?null:[...new Set(l.map(s=>s.contentHash))].sort()},r=a(e.baseline),n=a(e.head),i=await Fe(e.workspacePath,t),d=e.baseline.pccArtifactContentHashes?.[t];return d?i===null||i!==d:r&&r.length>0?i===null||!r.includes(i):r&&r.length===0?i!==null||!!n?.length:r===null||n===null?true:c(r)!==c(n)}async function ha(e){let t=P.resolve(e.workspacePath),{lease:a,record:r}=await R(t,e.changeId);if(r.transaction.state!=="authorized"&&r.transaction.state!=="executing")throw new Error(`Verification requires authorized or executing state, observed ${r.transaction.state}.`);e.refresh!==false&&await c$1({workspacePath:t,strict:false,agent:"generic"});let n=await J(t),i=await A(t,a.privateMaterialization.artifact);if(!i||c(i)!==a.privateMaterialization.digest.value)throw new Error(`The hash-bound baseline materialization is missing or corrupt for ${e.changeId}.`);let d=new Date().toISOString(),f$1=n.model.projects.filter(y=>a.scope.projects.includes(y.name)).map(y=>C(y.path).replace(/\/$/u,"")).filter(Boolean),l=Et({overlay:a$1(i,n.graph,new Date(d)),scope:a.scope,projectPrefixes:f$1,scopedEntityIds:new Set([...i.entities,...n.graph.entities].filter(y=>y.projectId&&a.scope.projects.includes(y.projectId)).map(y=>y.id))}),s=E(e.changeId);await h$1(t,s.actualOverlay,l);let o=F(s.actualOverlay,l.schemaVersion,l,"actual-architecture-overlay"),h=await A(t,s.prediction),w=h?F(s.prediction,h.schemaVersion,h,"noncanonical-prediction"):null,u=bt({changeId:e.changeId,generatedAt:d,prediction:h,predictionReference:w,actual:l,actualReference:o});await h$1(t,s.surprises,u);let I=F(s.surprises,u.schemaVersion,u,"architecture-surprises"),c$2=r,g$1=e.actorKind??"cli",D=e.actorId??"workspai-change-verify";if(se(l)&&c$2.transaction.effects.length===0){c$2=await k(t,c$2,e.changeId,v("blocked",{summary:"Observed architecture change has no typed effect receipt.",blocker:{code:"change.effect_receipt.missing",actionable:true,details:"Record the actual mutation effect before verification can claim causality."}},g$1,D));let y=await S(t,a,c$2);return V({operation:"verify",lease:a,record:c$2,capsule:y,nextActions:[`workspai change resume --change ${e.changeId} --to authorized --reason "Record missing effect receipt" --json`]})}let j=c$2.transaction.effects.filter(y=>y.status==="succeeded").flatMap(y=>[...y.artifacts.map(H=>H.artifact),...(y.deletedArtifacts??[]).map(H=>H.artifact)]),Xe=new Set(j.map(C)),Qe=(await Promise.all(l.changedArtifacts.map(async y=>({artifact:y,contentChanged:await $t({workspacePath:t,artifact:y,baseline:i,head:n.graph})})))).filter(({artifact:y,contentChanged:H})=>H&&Rt({artifact:y,scope:a.scope,projectPrefixes:f$1,receiptedArtifacts:Xe})).map(({artifact:y})=>y),ge=await Dt({workspacePath:t,changedArtifacts:Qe,receiptedArtifacts:j});if(ge.length>0){c$2=await k(t,c$2,e.changeId,v("blocked",{summary:"Observed architecture artifacts are not covered by typed effect receipts.",blocker:{code:"change.effect_receipt.coverage_missing",actionable:true,details:`Uncovered artifacts: ${ge.slice(0,20).join(", ")}`}},g$1,D));let y=await S(t,a,c$2);return V({operation:"verify",lease:a,record:c$2,capsule:y,nextActions:[`workspai change resume --change ${e.changeId} --to authorized --reason "Cover observed artifacts" --json`]})}c$2=await k(t,c$2,e.changeId,v("verification-started",{summary:"Begin independent post-effect verification."},g$1,D));let Ze=await f({workspacePath:t}),et=await g(Ze,t),he=P.relative(t,et).split(P.sep).join("/"),X=await A(t,he);if(!X)throw new Error(`Workspace Verify evidence was not persisted at ${he}.`);await h$1(t,s.workspaceVerification,X);let M=await A(t,s.workspaceVerification);if(!M)throw new Error(`Change-scoped Workspace Verify evidence was not persisted at ${s.workspaceVerification}.`);let K=h$2(X,{strict:e.strict===true}),pe=Y(n),ue={id:`verify-workspace-${c({generatedAt:d,verify:M,gate:K}).slice(0,16)}`,criterionId:"workspace-verify",status:K.passed?"passed":"failed",summary:K.passed?`Workspace Verify passed in ${K.mode} mode.`:`Workspace Verify blocked in ${K.mode} mode: ${K.reasons.join("; ")}`,target:{modelHash:pe.modelHash,graphHash:pe.graphHash,effectHeadDigest:U(c$2.transaction,oe)},artifacts:[F(s.workspaceVerification,M.schemaVersion,M),o,I],observedAt:d};if(c$2=await k(t,c$2,e.changeId,v("verification-recorded",{summary:ue.summary,verification:ue},g$1,D)),c$2.transaction.state==="verifying"){let y=c$2.transaction.requiredCriteria.filter(H=>c$2.transaction.verifications.filter(at=>at.criterionId===H).at(-1)?.status!=="passed");y.length>0?c$2=await k(t,c$2,e.changeId,v("blocked",{summary:"Required outcome verification is incomplete.",blocker:{code:"change.verification.criteria_missing",actionable:true,details:`Missing passing receipts: ${y.join(", ")}`}},g$1,D)):c$2=await k(t,c$2,e.changeId,v("committed",{summary:"Seal the independently verified proof-carrying change."},g$1,D));}let tt=await S(t,a,c$2);return V({operation:"verify",lease:a,record:c$2,capsule:tt,nextActions:c$2.transaction.state==="committed"?[`workspai change capsule validate --change ${e.changeId} --json`]:[`workspai change status --change ${e.changeId} --json`]})}async function pa(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId),r=await le({workspacePath:e.workspacePath,lease:t,record:a});return V({operation:e.operation??"status",lease:t,record:a,capsule:r,nextActions:a.transaction.state==="evidence-ready"?[`workspai change authorize --change ${e.changeId} --effects filesystem,command --json`]:a.transaction.state==="authorized"||a.transaction.state==="executing"?[`workspai change verify --change ${e.changeId} --json`]:[]})}async function ua(e){let t=P.resolve(e.workspacePath),a$1=await b$1(t,".workspai/changes","directory"),n=(a$1?await T.readdir(a$1,{withFileTypes:true}):[]).filter(l=>l.isDirectory()&&/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(l.name)).map(l=>l.name).sort(),i=[],d=null;for(let l of n)try{let{lease:s,record:o}=await R(t,l);d??=s.workspace.name;let h=await le({workspacePath:t,lease:s,record:o}),w=await fe({workspacePath:t,changeId:l}),u=o.transaction.blockers.map(c=>c.details??c.code),I=h.status==="blocked"?h.assurances.filter(c=>c.status==="failed").map(c=>`${c.id}: ${c.summary}`):[];i.push({changeId:l,goalId:s.goalId,state:o.transaction.state,status:h.status,createdAt:o.transaction.createdAt,updatedAt:o.transaction.updatedAt,scope:s.scope,assurance:{passed:h.assurances.filter(c=>c.status==="passed").length,total:h.assurances.length},blockers:[...new Set([...u,...I])],capsuleArtifact:E(l).capsule,valid:w.valid,errors:w.errors});}catch(s){i.push({changeId:l,goalId:null,state:null,status:"invalid",createdAt:null,updatedAt:null,scope:null,assurance:{passed:0,total:5},blockers:[],capsuleArtifact:E(l).capsule,valid:false,errors:[s instanceof Error?s.message:String(s)]});}i.sort((l,s)=>(s.updatedAt??"").localeCompare(l.updatedAt??"")||l.changeId.localeCompare(s.changeId));let f={schemaVersion:m,generatedAt:new Date().toISOString(),workspace:{name:d??await wt(t)},changes:i,summary:{total:i.length,open:i.filter(l=>l.status==="open"||l.status==="verified").length,blocked:i.filter(l=>l.status==="blocked").length,sealed:i.filter(l=>l.status==="sealed").length,aborted:i.filter(l=>l.status==="aborted").length,invalid:i.filter(l=>!l.valid).length}};return a(f,"contracts/workspace-intelligence/proof-carrying-change-list.v1.json","Proof-Carrying Change list"),f}async function ma(e){let{lease:t,record:a}=await R(e.workspacePath,e.changeId),r=await k(e.workspacePath,a,e.changeId,v("aborted",{summary:e.reason,reason:e.reason},"human",e.actorId)),n=await S(e.workspacePath,t,r);return V({operation:"abort",lease:t,record:r,capsule:n,nextActions:[]})}async function fe(e){let t=E(e.changeId),a$1=await A(e.workspacePath,t.capsule);if(!a$1)throw new Error(`Proof-carrying change capsule not found: ${e.changeId}`);let r=[];a$1.schemaVersion!==k$1&&r.push(`Unsupported capsule schema: ${a$1.schemaVersion}`),a$1.changeId!==e.changeId&&r.push("Capsule change binding does not match."),c(At(a$1))!==a$1.integrity.capsuleDigest&&r.push("Capsule integrity digest does not match its canonical content.");let{lease:n$1,record:i}=await R(e.workspacePath,e.changeId),d=i.transaction.evidence.find(s=>s.role==="architecture-lease");(!d||d.digest.value!==c(n$1))&&r.push("Architecture lease does not match the decision-ledger evidence binding."),(n$1.goalId!==a$1.goalId||n$1.generation!==c({modelHash:n$1.baseline.model.digest.value,graphHash:n$1.baseline.graph.digest.value,inputHash:n$1.baseline.graph.inputHash}))&&r.push("Architecture lease identity or generation binding is invalid."),i.transaction.eventHeadDigest!==a$1.decision.eventHeadDigest&&r.push("Capsule does not bind the current decision event head."),c(i.transaction)!==a$1.decision.transaction.digest.value&&r.push("Decision transaction projection digest does not match the capsule.");let f=await A(e.workspacePath,n$1.privateMaterialization.artifact);(!f||c(f)!==n$1.privateMaterialization.digest.value)&&r.push("Hash-bound baseline materialization is missing or corrupt.");for(let s of [a$1.intent,a$1.decision.transaction,a$1.prediction,a$1.actualOverlay,a$1.surpriseReport,...a$1.effects,...a$1.verification].filter(o=>!!o))await ce(e.workspacePath,s)||r.push(`Referenced artifact is missing or corrupt: ${s.artifact}`);for(let s of a$1.deletedArtifacts??[])await Ye(e.workspacePath,s)||r.push(`Deleted artifact tombstone is invalid or the artifact exists again: ${s.artifact}`);let l={schemaVersion:n,changeId:e.changeId,validatedAt:new Date().toISOString(),valid:r.length===0,errors:r,capsule:a$1};return a(l,"contracts/workspace-intelligence/proof-carrying-change-capsule-validation.v1.json","Proof-Carrying Change capsule validation"),l}async function ya(e){let t=await fe(e);if(!t.valid)throw new Error(`Cannot export an invalid capsule: ${t.errors.join("; ")}`);let a$1=P.resolve(e.workspacePath),r=P.resolve(a$1,e.outputPath),n=P.relative(a$1,r);if(n===".."||n.startsWith(`..${P.sep}`)||P.isAbsolute(n))throw new Error("Capsule export path must remain inside the workspace.");let i=n.split(P.sep).join("/"),d=await h$1(a$1,i,t.capsule),f={schemaVersion:o,changeId:e.changeId,outputPath:d,validation:t};return a(f,"contracts/workspace-intelligence/proof-carrying-change-capsule-export.v1.json","Proof-Carrying Change capsule export"),f}function wa(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Prediction input must be a JSON object.");let t=e;if(!Array.isArray(t.operations)||!Array.isArray(t.assumptions))throw new Error("Prediction input requires operations[] and assumptions[].");let a=new Set(["add","remove","change"]),r=new Set(["entity","relation","proof","artifact"]),n=new Set(["high","medium","low"]);for(let d of t.operations)if(!d||!a.has(d.operation)||!r.has(d.targetKind)||typeof d.targetId!="string"||d.targetId.trim().length===0||typeof d.rationale!="string"||!n.has(d.confidence))throw new Error("Prediction contains an invalid operation.");let i=t.predictedRisk;if(!i||!["none","low","medium","high"].includes(i))throw new Error("Prediction requires predictedRisk: none, low, medium, or high.");return {schemaVersion:i$1,changeId:t.changeId??"change-placeholder",goalId:t.goalId??"goal-placeholder",generatedAt:t.generatedAt??new Date().toISOString(),baselineGeneration:t.baselineGeneration??"pending-binding",nonCanonical:true,proofEligible:false,operations:t.operations,assumptions:t.assumptions.filter(d=>typeof d=="string"),predictedRisk:i}}function va(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Effect receipt input must be a JSON object.");let t=e;if(typeof t.id!="string"||!["filesystem","command","configuration","dependency","external"].includes(String(t.effectClass))||!["succeeded","failed","uncertain"].includes(String(t.status))||typeof t.summary!="string"||typeof t.observedAt!="string"||typeof t.idempotencyKey!="string"||!Array.isArray(t.artifacts))throw new Error("Effect receipt is missing required typed fields.");if(t.deletedArtifacts!==void 0&&(!Array.isArray(t.deletedArtifacts)||t.deletedArtifacts.some(r=>!r||typeof r.artifact!="string"||r.observedAt!==void 0&&typeof r.observedAt!="string"||r.digest!==void 0&&(r.digest.algorithm!=="sha256"||r.digest.semantics!=="deletion-tombstone-v1"||typeof r.digest.value!="string"))))throw new Error("Effect receipt contains an invalid deleted-artifact tombstone.");let a=t;return {...a,...a.deletedArtifacts?{deletedArtifacts:a.deletedArtifacts.map(r=>r.digest?r:vt({artifact:r.artifact,observedAt:r.observedAt??a.observedAt}))}:{}}}function ka(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Verification receipt input must be a JSON object.");let t=e;if(typeof t.id!="string"||typeof t.criterionId!="string"||!["passed","failed","inconclusive"].includes(String(t.status))||typeof t.summary!="string"||typeof t.observedAt!="string"||!t.target||typeof t.target.modelHash!="string"||typeof t.target.graphHash!="string"||typeof t.target.effectHeadDigest!="string"||!Array.isArray(t.artifacts))throw new Error("Verification receipt is missing required typed fields.");return t}function Ca(e,t){return e.decision.eventHeadDigest===t.eventHeadDigest&&e.decision.transaction.digest.value===c(t)}async function Ia(e){let t=await fe({workspacePath:e.workspacePath,changeId:e.changeId});if(!t.valid)throw new Error(`Proof-carrying change ${e.changeId} failed capsule validation.`);let{lease:a,record:r}=await R(e.workspacePath,e.changeId);if(a.goalId!==e.goalId||r.transaction.state!=="committed"||t.capsule.status!=="sealed")throw new Error(`Proof-carrying change ${e.changeId} is not a sealed change for ${e.goalId}.`);let n=[...r.transaction.verifications].reverse().find(i=>i.status==="passed");if(!n)throw new Error(`Proof-carrying change ${e.changeId} has no passing verification receipt.`);return {modelHash:n.target.modelHash,graphHash:n.target.graphHash}}
 export{Be as a,vt as b,sa as c,oa as d,ca as e,da as f,la as g,fa as h,ga as i,Dt as j,ha as k,pa as l,ua as m,ma as n,fe as o,ya as p,wa as q,va as r,ka as s,Ca as t,Ia as u};

package/dist/{chunk-GE46XKD2.js → chunk-4JXJRIJM.js}

@@ -1 +1 @@
-import {a as a$1}from'./chunk-A5FBGRJA.js';import {g as g$1,p}from'./chunk-LMOTDLJF.js';import {g,h}from'./chunk-BLEIUQL6.js';import {s as s$1,q}from'./chunk-RGNCL5OB.js';import {t as t$1}from'./chunk-VQZ5PI5J.js';import {t,s}from'./chunk-ODK4LCEL.js';import a from'path';import {existsSync}from'fs';import m from'fs-extra';var f=t.workspaceRegistry,w=s.workspaceRegistry.schemaVersion;function E(r){return {slug:r.slug,relativePath:r.relativePath,framework:r.framework,kit:r.kit,source:r.source}}async function b(r){let e=t$1(r,"workspace.json").find(t=>existsSync(t));if(!e)return {exists:false,legacyProjectCount:0};try{let t=await m.readJson(e),c=Array.isArray(t.projects)?t.projects.length:0,o=typeof t.workspace_name=="string"&&t.workspace_name.trim()||typeof t.name=="string"&&t.name.trim()||a.basename(r);return {exists:true,manifestPath:e,workspaceName:o,profile:typeof t.profile=="string"?t.profile:void 0,legacyProjectCount:c}}catch{return {exists:true,manifestPath:e,legacyProjectCount:0,workspaceName:a.basename(r)}}}async function _(r){let e=a$1(r);for(let t of s$1())if(await m.pathExists(t))try{let o=((await m.readJson(t)).workspaces||[]).find(s=>a$1(s.path)===e);if(o)return {exists:true,projectCount:Array.isArray(o.projects)?o.projects.length:0,registryPath:t}}catch{continue}return {exists:false,projectCount:0,registryPath:a.join(q(),"workspaces.json")}}async function T(r,e){let t=a.resolve(r),c=await g(t,g$1),o=await b(t),s=await _(t),i=e?.contract!==void 0||!!c,n=[];if(e?.contract)n=e.contract.projects||[];else if(i)try{let{contract:A}=await p({workspacePath:t});n=A.projects||[];}catch{n=[];}let d={contract:{exists:i,projectCount:n.length,path:g$1},globalRegistry:{exists:s.exists,projectCount:s.projectCount,path:s.registryPath},legacyWorkspaceJson:{exists:o.exists,projectCount:o.legacyProjectCount,path:o.manifestPath?a.relative(t,o.manifestPath):void 0}},p$1="none",u=[],y=0;return i?(p$1="workspace.contract.json",u=n.map(E),y=u.length):s.projectCount>0?(p$1="global-registry",y=s.projectCount):o.legacyProjectCount>0&&(p$1="legacy-workspace.json",y=o.legacyProjectCount),{contractExists:i,summary:{schemaVersion:w,kind:"rapidkit.workspace.registry",workspacePath:t,workspaceName:o.workspaceName||a.basename(t),profile:o.profile,projectCount:y,authority:p$1,contractPath:g$1,projects:u,sources:d}}}async function U(r){let e=await g(r,f);if(!e)return null;try{let t=await m.readJson(e);return t?.schemaVersion!==w?null:t}catch{return null}}async function D(r,e){let t=await M(r,e);return await h(r,f,t),t}async function M(r,e){return {...(await T(r,{contract:e?.contract})).summary,generatedAt:(e?.now??new Date).toISOString(),registrySummaryPath:f}}function F(r,e=""){return r.projectCount>0?r.authority==="workspace.contract.json"?`${r.projectCount} project(s) registered in workspace contract${e}.`:r.authority==="global-registry"?`${r.projectCount} project(s) registered in global workspace registry${e}.`:`${r.projectCount} project(s) registered in legacy workspace manifest${e}.`:`Workspace state exists, but no projects are registered yet${e}.`}export{f as a,w as b,T as c,U as d,D as e,M as f,F as g};
+import {a as a$1}from'./chunk-A5FBGRJA.js';import {g as g$1,p}from'./chunk-VXFIMEC6.js';import {g,h}from'./chunk-BLEIUQL6.js';import {s as s$1,q}from'./chunk-RGNCL5OB.js';import {t as t$1}from'./chunk-VQZ5PI5J.js';import {t,s}from'./chunk-ODK4LCEL.js';import a from'path';import {existsSync}from'fs';import m from'fs-extra';var f=t.workspaceRegistry,w=s.workspaceRegistry.schemaVersion;function E(r){return {slug:r.slug,relativePath:r.relativePath,framework:r.framework,kit:r.kit,source:r.source}}async function b(r){let e=t$1(r,"workspace.json").find(t=>existsSync(t));if(!e)return {exists:false,legacyProjectCount:0};try{let t=await m.readJson(e),c=Array.isArray(t.projects)?t.projects.length:0,o=typeof t.workspace_name=="string"&&t.workspace_name.trim()||typeof t.name=="string"&&t.name.trim()||a.basename(r);return {exists:true,manifestPath:e,workspaceName:o,profile:typeof t.profile=="string"?t.profile:void 0,legacyProjectCount:c}}catch{return {exists:true,manifestPath:e,legacyProjectCount:0,workspaceName:a.basename(r)}}}async function _(r){let e=a$1(r);for(let t of s$1())if(await m.pathExists(t))try{let o=((await m.readJson(t)).workspaces||[]).find(s=>a$1(s.path)===e);if(o)return {exists:true,projectCount:Array.isArray(o.projects)?o.projects.length:0,registryPath:t}}catch{continue}return {exists:false,projectCount:0,registryPath:a.join(q(),"workspaces.json")}}async function T(r,e){let t=a.resolve(r),c=await g(t,g$1),o=await b(t),s=await _(t),i=e?.contract!==void 0||!!c,n=[];if(e?.contract)n=e.contract.projects||[];else if(i)try{let{contract:A}=await p({workspacePath:t});n=A.projects||[];}catch{n=[];}let d={contract:{exists:i,projectCount:n.length,path:g$1},globalRegistry:{exists:s.exists,projectCount:s.projectCount,path:s.registryPath},legacyWorkspaceJson:{exists:o.exists,projectCount:o.legacyProjectCount,path:o.manifestPath?a.relative(t,o.manifestPath):void 0}},p$1="none",u=[],y=0;return i?(p$1="workspace.contract.json",u=n.map(E),y=u.length):s.projectCount>0?(p$1="global-registry",y=s.projectCount):o.legacyProjectCount>0&&(p$1="legacy-workspace.json",y=o.legacyProjectCount),{contractExists:i,summary:{schemaVersion:w,kind:"rapidkit.workspace.registry",workspacePath:t,workspaceName:o.workspaceName||a.basename(t),profile:o.profile,projectCount:y,authority:p$1,contractPath:g$1,projects:u,sources:d}}}async function U(r){let e=await g(r,f);if(!e)return null;try{let t=await m.readJson(e);return t?.schemaVersion!==w?null:t}catch{return null}}async function D(r,e){let t=await M(r,e);return await h(r,f,t),t}async function M(r,e){return {...(await T(r,{contract:e?.contract})).summary,generatedAt:(e?.now??new Date).toISOString(),registrySummaryPath:f}}function F(r,e=""){return r.projectCount>0?r.authority==="workspace.contract.json"?`${r.projectCount} project(s) registered in workspace contract${e}.`:r.authority==="global-registry"?`${r.projectCount} project(s) registered in global workspace registry${e}.`:`${r.projectCount} project(s) registered in legacy workspace manifest${e}.`:`Workspace state exists, but no projects are registered yet${e}.`}export{f as a,w as b,T as c,U as d,D as e,M as f,F as g};

package/dist/chunk-5HNQIMGW.js

@@ -0,0 +1 @@
+import ce from'path';var le="workspace-knowledge-search.v1";function w(e){return e.trim().toLowerCase()}var J=new WeakMap;function G(e){let t=J.get(e);if(t)return t;let s=new Map(e.relations.map(a=>[a.id,a])),o=new Map(e.entities.map(a=>[a.id,a])),i=new Map(e.proofs.map(a=>[a.id,a])),r=new Map,c=new Map,l=(a,g)=>{let p=c.get(a)??[];p.push(g),c.set(a,p);};for(let a of e.entities){let g=[a.id,a.label,a.identity.key,...a.kind==="project"&&a.projectId?[a.projectId]:[],...a.identity.aliases];for(let p of new Set(g.map(w))){let y=r.get(p)??[];y.push(a),r.set(p,y);}}for(let a of e.relations)l(a.from,{from:a.from,to:a.to,relationId:a.id,kind:a.kind,direction:"forward",proofIds:a.proofIds}),l(a.to,{from:a.to,to:a.from,relationId:a.id,kind:a.kind,direction:"reverse",proofIds:a.proofIds});for(let a of r.values())a.sort((g,p)=>g.id.localeCompare(p.id));for(let a of c.values())a.sort((g,p)=>g.to.localeCompare(p.to)||g.relationId.localeCompare(p.relationId));let d={entitiesById:o,relationsById:s,entitiesByAlias:r,proofsById:i,adjacency:c};return J.set(e,d),d}function de(e,t){let s=new Set(e.entities.filter(i=>i.kind==="project"&&(i.projectId===t||i.label===t)).map(i=>i.id)),o=new Set(s);for(let i of e.relations)s.has(i.from)&&o.add(i.to),s.has(i.to)&&o.add(i.from);return o}function F(e,t,s){return !s||t.projectId===s?true:t.projectId!==void 0?false:de(e,s).has(t.id)}function H(e,t,s){let o=G(e),i=o.relationsById.get(t);if(i)return {found:true,targetType:"relation",relation:i};let r=w(t),c=(o.entitiesByAlias.get(r)??[]).filter(l=>F(e,l,s));return c.length===1?{found:true,targetType:"entity",entity:c[0]}:{found:false,query:t,candidates:c.map(l=>l.id).sort()}}function Ae(e,t,s){let o=H(e,t,s);if(!o.found)return {query:t,found:false,target:null,proofs:[],candidates:o.candidates};let i=o.targetType==="entity"?o.entity:o.relation,r=new Set(i.proofIds);return {query:t,found:true,target:i,candidates:[],proofs:[...r].map(c=>G(e).proofsById.get(c)).filter(c=>!!c).sort((c,l)=>c.id.localeCompare(l.id))}}function Ce(e,t,s,o){let i=H(e,t,o),r=H(e,s,o);if(!i.found||i.targetType!=="entity"||!r.found||r.targetType!=="entity")return {from:t,to:s,found:false,resolvedFrom:i.found&&i.targetType==="entity"?i.entity.id:null,resolvedTo:r.found&&r.targetType==="entity"?r.entity.id:null,entityPath:[],hops:[],proofs:[]};let c=G(e),l=[i.entity.id],d=new Map,a=new Set(l),g=0;for(;g<l.length&&!a.has(r.entity.id);){let h=l[g++];for(let m of c.adjacency.get(h)??[])a.has(m.to)||(a.add(m.to),d.set(m.to,m),l.push(m.to));}if(!a.has(r.entity.id))return {from:t,to:s,found:false,resolvedFrom:i.entity.id,resolvedTo:r.entity.id,entityPath:[],hops:[],proofs:[]};let p=[],y=r.entity.id;for(;y!==i.entity.id;){let h=d.get(y);if(!h)break;p.push(h),y=h.from;}p.reverse();let K=new Set(p.flatMap(h=>h.proofIds));return {from:t,to:s,found:true,resolvedFrom:i.entity.id,resolvedTo:r.entity.id,entityPath:[i.entity.id,...p.map(h=>h.to)],hops:p,proofs:[...K].map(h=>c.proofsById.get(h)).filter(h=>!!h).sort((h,m)=>h.id.localeCompare(m.id))}}function Be(e,t,s){return e.entities.filter(o=>(!t||o.kind===t)&&F(e,o,s)).sort((o,i)=>o.kind.localeCompare(i.kind)||o.label.localeCompare(i.label))}var b={relations:12,relatedEntities:12,proofs:8,proofIdsPerItem:4,aliasesPerEntity:8,attributeArrayItems:8,attributeStringCharacters:256};function pe(e){let t=[],s=new Set;for(let o=0;o<b.proofIdsPerItem&&t.length<b.proofs;o+=1)for(let i of e){let r=i.proofIds[o];if(!(!r||s.has(r))&&(s.add(r),t.push(r),t.length>=b.proofs))break}return t}function ue(e,t,s){let o=e.identity.aliases.slice(0,b.aliasesPerEntity);s.aliases+=e.identity.aliases.length-o.length;let i=Object.fromEntries(Object.entries(e.attributes).map(([c,l])=>{if(Array.isArray(l)){let d=l.slice(0,b.attributeArrayItems);return s.attributeValues+=l.length-d.length,[c,d]}return typeof l=="string"&&l.length>b.attributeStringCharacters?(s.attributeValues+=1,[c,l.slice(0,b.attributeStringCharacters)]):[c,l]})),r=e.proofIds.filter(c=>t.has(c)).slice(0,b.proofIdsPerItem);return s.proofReferences+=e.proofIds.length-r.length,{...e,identity:{...e.identity,aliases:o},attributes:i,proofIds:r}}function ge(e){let t=Object.values(e.attributes).flatMap(s=>Array.isArray(s)?s:[s]);return [e.id,e.kind,e.label,e.projectId??"",e.identity.key,...e.identity.aliases,...t.map(s=>String(s??""))].join(" ").toLowerCase()}var he=new Set(["a","an","and","are","as","at","be","been","being","by","can","check","could","did","do","does","find","for","from","give","had","has","have","how","i","in","into","is","it","its","may","might","of","on","or","our","show","should","that","the","their","them","then","there","these","they","this","those","tell","to","was","we","were","what","when","where","which","who","why","will","with","would","you","your"]),fe=new Map([["authenticate","auth"],["authenticated","auth"],["authentication","auth"],["authorization","auth"],["authorizing","auth"],["built","build"],["config","configuration"],["configs","configuration"],["dependencies","dependency"],["connected","connect"],["connecting","connect"],["connection","connect"],["connections","connect"],["diagnostics","diagnostic"],["defined","define"],["definition","define"],["definitions","define"],["events","event"],["handled","handle"],["handling","handle"],["implemented","implement"],["implementing","implement"],["implementations","implementation"],["implements","implement"],["reliable","reliability"],["tested","test"],["testing","test"],["tests","test"],["tools","tool"],["verification","verify"],["verified","verify"],["verifies","verify"],["verifying","verify"]]);function j(e){let t=s=>w(s).replace(/\bc\+\+/gu," cplusplus ").replace(/\bc#/gu," csharp ").split(/[^a-z0-9]+/u).filter(o=>o.length>1||o==="c"||o==="r").map(o=>fe.get(o)??o);return [...new Set([...t(e),...t(e.replace(/([a-z0-9])([A-Z])/g,"$1 $2"))])]}function ye(e){let t=w(e.label),s=w(e.identity.key),o=e.identity.aliases.map(w),i=ge(e),r=new Set(j(e.label)),c=new Set(j(e.identity.key)),l=new Set(e.identity.aliases.flatMap(j));return {entity:e,label:t,identity:s,aliases:o,haystack:i,labelTokens:r,identityTokens:c,aliasTokens:l,allTokens:new Set([...j(i),...r,...c,...l])}}function ee(e,t){return t.length>=5&&e.startsWith(t)}function W(e,t){return e.has(t)||[...e].some(s=>ee(s,t))}function q(e,t){return W(e.labelTokens,t)||W(e.identityTokens,t)||W(e.aliasTokens,t)||W(e.allTokens,t)}function ke(e,t,s,o){let{label:i,identity:r,aliases:c,haystack:l}=e,d=0;(i===t||r===t||c.includes(t))&&(d+=1e4),(i.startsWith(t)||r.startsWith(t))&&(d+=250),l.includes(t)&&(d+=100);let a=0;for(let g of s){let p=o.get(g)??1,y=W(e.labelTokens,g),K=W(e.identityTokens,g),h=W(e.aliasTokens,g),m=q(e,g);m&&(a+=1),i===g?d+=80*p:y&&(d+=36*p),K&&(d+=24*p),h&&(d+=20*p),m&&(d+=10*p);}return s.length>0&&(d+=a/s.length*120),d}function me(e,t){if(["build","compiled","dist","generated","fixture","fixtures","testdata","target","third","vendor","vendored"].some(r=>t.has(r)))return 0;if(e.attributes.generated===true)return 5e3;let o=typeof e.attributes.artifact=="string"?e.attributes.artifact:"",i=`${e.label}/${e.identity.key}/${o}`.toLowerCase();return /(?:^|\/)(?:__fixtures__|__testfixtures__|build|compiled|dist|fixture|fixtures|generated|node_modules|target|testdata|third_party|vendor)(?:\/|$)/u.test(i)?5e3:0}function Q(e,t){let s=new Set;for(let o of t){let i=e.allTokens.has(o)?o:void 0,r=i===void 0&&o.length>=3?[...e.allTokens].find(l=>ee(l,o)&&!s.has(l)):void 0,c=i??r;c&&!s.has(c)&&s.add(c);}return s.size}function we(e,t){let s=new Set([...e.labelTokens,...e.identityTokens,...e.aliasTokens]);return Q({allTokens:s},t)}var te=new Map([["c","c"],["clojure","clojure"],["cplusplus","cpp"],["cpp","cpp"],["typescript","typescript"],["ts","typescript"],["javascript","javascript"],["js","javascript"],["nodejs","javascript"],["python","python"],["py","python"],["go","go"],["golang","go"],["csharp","csharp"],["ada","ada"],["assembly","assembly"],["asm","assembly"],["cuda","cuda"],["dotnet","csharp"],["dart","dart"],["elixir","elixir"],["fsharp","fsharp"],["fortran","fortran"],["java","java"],["kotlin","kotlin"],["hlsl","hlsl"],["llvmir","llvm-ir"],["mlir","mlir"],["lua","lua"],["php","php"],["r","r"],["ruby","ruby"],["rust","rust"],["tablegen","tablegen"],["scala","scala"],["svelte","svelte"],["swift","swift"],["vue","vue"]]);function be(e){let t=new Set(e.map(o=>te.get(o)).filter(o=>!!o));return (e.includes("nodejs")||e.includes("node")&&e.includes("js"))&&(t.add("javascript"),t.add("typescript")),t}function Ie(e){let t=new Set(e.filter(o=>te.has(o)));return (e.includes("nodejs")||e.includes("node")&&e.includes("js"))&&(t.add("node"),t.add("js"),t.add("nodejs")),t}function z(e){let t=e.attributes.language;return typeof t=="string"?w(t):null}var Se=new Set(["api","endpoint","module","package","service"]);function Ke(e,t,s){if(s.size===0||!Se.has(e.entity.kind))return 0;let o=[...e.labelTokens].filter(r=>r.length>=2&&!ne(r));if(o.length===0)return 0;let i=t.filter(r=>{let c=z(r.entity);return c!==null&&s.has(c)&&r.entity.projectId===e.entity.projectId&&o.every(l=>r.allTokens.has(l))});return i.length>0?600+Math.min(i.length,10)*10:0}function Ee(e){return {project:1e3,service:900,api:900,package:850,endpoint:800,container:700,deployment:700,environment:650,pipeline:600,"test-suite":550,owner:500,decision:450,document:400}[e.kind]??0}var We=new Set(["language","languages","binding","bindings","bridge","bridges","build","dependency","dependencies","depends","core","runtime","owner","owners","ownership","maintainer","ci","pipeline","pipelines","workflow","deploy","deployment","infrastructure","container","doc","docs","document","documentation","service","services","api","endpoint","endpoints","route","routes","rpc","schema","schemas","message","protobuf","proto","contract"]),Te=new Set(["app","application","applications","call","calls","code","communicate","communication","connect","define","defined","expose","exposed","handle","handled","implement","implementation","integrate","integration","interact","interaction","project","provide","provided","sdk","system","use","used","uses","using"]);function ne(e){return We.has(e)||Te.has(e)}function ve(e,t){let s=t.has("language")||t.has("languages"),o=t.has("binding")||t.has("bindings")||t.has("bridge")||t.has("bridges"),i=t.has("dependency")||t.has("dependencies")||t.has("depends"),r=t.has("core")||t.has("runtime"),c=t.has("owner")||t.has("owners")||t.has("ownership")||t.has("maintainer"),l=t.has("ci")||t.has("pipeline")||t.has("pipelines")||t.has("workflow"),d=t.has("deploy")||t.has("deployment")||t.has("infrastructure")||t.has("container"),a=t.has("doc")||t.has("docs")||t.has("document")||t.has("documentation"),g=t.has("service")||t.has("services")||t.has("api")||t.has("rpc"),p=t.has("endpoint")||t.has("endpoints")||t.has("route")||t.has("routes"),y=t.has("schema")||t.has("schemas")||t.has("message")||t.has("protobuf")||t.has("proto")||t.has("contract"),K=t.has("build"),h=typeof e.attributes.mechanism=="string"?w(e.attributes.mechanism):"",m=typeof e.attributes.specification=="string"?w(e.attributes.specification):"",N=w(e.label),f=0;if(s&&e.kind==="language"){let x=typeof e.attributes.fileCount=="number"?e.attributes.fileCount:0;f+=900+Math.min(x,1e4)/10;}if(o&&e.kind==="protocol"&&(f+=800),i&&e.kind==="package"&&(f+=650),r&&e.kind==="package"&&/(?:^|[_-])core(?:$|[_-])/u.test(N)&&(f+=700),r&&e.kind==="protocol"&&h.includes("core")&&(f+=300),c&&e.kind==="owner"&&(f+=850),l&&e.kind==="pipeline"&&(f+=800),d&&["deployment","container","environment"].includes(e.kind)&&(f+=775),a&&["document","decision"].includes(e.kind)&&(f+=725),g&&["api","endpoint","service"].includes(e.kind)&&(f+=700),p&&e.kind==="endpoint"&&(f+=1e3),K){let x=typeof e.attributes.artifact=="string"?e.attributes.artifact:e.label,T=ce.basename(x).toLowerCase(),O=typeof e.attributes.stage=="string"?w(e.attributes.stage):"";e.kind==="lifecycle-stage"&&O==="build"?f+=1100:e.kind==="file"&&/^(?:cargo\.toml|composer\.json|dockerfile(?:\..+)?|go\.mod|makefile|package\.json|pom\.xml|pyproject\.toml|requirements[^/]*\.txt)$/u.test(T)?f+=950:(e.kind==="package"||e.kind==="container")&&(f+=700);}return y&&(e.kind==="schema"||(e.kind==="api"||e.kind==="protocol")&&(m.includes("protobuf")||h.includes("protobuf")))&&(f+=750),f}function Me(e){return [e.has("language")||e.has("languages"),e.has("binding")||e.has("bindings")||e.has("bridge")||e.has("bridges"),e.has("dependency")||e.has("dependencies")||e.has("depends"),e.has("core")||e.has("runtime"),e.has("owner")||e.has("ownership")||e.has("maintainer"),e.has("ci")||e.has("pipeline")||e.has("workflow"),e.has("deploy")||e.has("deployment")||e.has("infrastructure"),e.has("doc")||e.has("docs")||e.has("documentation"),e.has("service")||e.has("api")||e.has("rpc"),e.has("endpoint")||e.has("endpoints")||e.has("route")||e.has("routes"),e.has("schema")||e.has("protobuf")||e.has("proto")||e.has("contract"),e.has("build")].filter(Boolean).length>=3}function Ge(e,t){let s=w(t.query),o=[...new Set(j(t.query))],i=new Set(j(t.projectId??"")),r=t.projectId?o.filter(n=>!i.has(n)):o,c=!!(t.projectId&&o.length>0&&r.length===0),l=r.filter(n=>!he.has(n)),d=l.length>0?l:r,a=be(d),g=Ie(d),p=new Set(d),y=d.filter(n=>!g.has(n)&&!ne(n)),K=Me(p),m=y.length>=2&&/\b(?:and|or)\b/iu.test(t.query)?1:d.length<=1?d.length:Math.min(2,Math.ceil(d.length/3)),N=t.minimumTermMatches===void 0?m:Math.min(m,Math.max(1,Math.trunc(t.minimumTermMatches))),f=Math.max(1,Math.min(Math.trunc(t.limit??12),100)),x=Math.max(0,Math.min(Math.trunc(t.relationsPerEntity??4),20)),T=e.entities.filter(n=>(!t.kind||n.kind===t.kind)&&F(e,n,t.projectId)).map(ye),O=new Map(d.map(n=>{let u=T.filter(k=>q(k,n)).length;return [n,Math.log((T.length+1)/(u+1))+1]})),R=T.map(n=>{let u=Q(n,d),k=Q(n,y),I=we(n,y),S=z(n.entity),B=S&&a.has(S)?400:0,P=S===null?Ke(n,T,a):0,ae=ve(n.entity,p),Z=y.length===0||y.some(re=>q(n,re))?ae:0;return {entity:n.entity,matchedTerms:u,matchedQualifiers:k,intentScore:Z,languageAffinity:P,score:c?Ee(n.entity):ke(n,s,d,O)+k*300+I*400+B+P+Z-me(n.entity,p)}}).filter(n=>{let u=z(n.entity),k=u!==null&&a.has(u)&&n.entity.kind==="language";return (a.size===0||u!==null&&a.has(u)||n.languageAffinity>0)&&(s.length===0||n.score>0&&(y.length===0||n.matchedQualifiers>0||k)&&(c||n.matchedTerms>=N||n.intentScore>0&&(K||d.length<=2)))}).sort((n,u)=>u.score-n.score||n.entity.kind.localeCompare(u.entity.kind)||n.entity.label.localeCompare(u.entity.label)),v=(K?(()=>{let n=[],u=[],k=new Map,I=new Set;for(let S of R){let B=k.get(S.entity.kind)??0,P=w(S.entity.label);B<2&&!I.has(P)?(n.push(S),k.set(S.entity.kind,B+1),I.add(P)):u.push(S);}return [...n,...u]})():R).slice(0,f).map(n=>n.entity),_=new Set(v.map(n=>n.id)),U=new Map,D=e.relations.filter(n=>{if(!(_.has(n.from)||_.has(n.to)))return  false;let k=_.has(n.from)?n.from:n.to,I=U.get(k)??0;return I>=x?false:(U.set(k,I+1),true)}),E=t.projection==="agent",M=E?D.slice(0,b.relations):D,V=G(e),L=[...new Set(M.flatMap(n=>[n.from,n.to]).filter(n=>!_.has(n)))].map(n=>V.entitiesById.get(n)).filter(n=>!!n).map(({id:n,kind:u,label:k,projectId:I})=>({id:n,kind:u,label:k,...I?{projectId:I}:{}})).sort((n,u)=>n.kind.localeCompare(u.kind)||n.label.localeCompare(u.label)),$=E?L.slice(0,b.relatedEntities):L,Y=new Set([...v.flatMap(n=>n.proofIds),...M.flatMap(n=>n.proofIds)]),oe=E?pe([...v,...M]):[...Y],A=new Set(oe),C={entities:R.length-v.length,relations:D.length-M.length,relatedEntities:L.length-$.length,proofs:Y.size-A.size,proofReferences:0,aliases:0,attributeValues:0},X=E?v.map(n=>ue(n,A,C)):v,se=E?M.map(n=>{let u=n.proofIds.filter(k=>A.has(k)).slice(0,b.proofIdsPerItem);return C.proofReferences+=n.proofIds.length-u.length,{...n,proofIds:u}}):M,ie=[...A].map(n=>V.proofsById.get(n)).filter(n=>!!n).sort((n,u)=>n.id.localeCompare(u.id));return {schemaVersion:le,graphSourceHash:e.source.hash,query:t.query,kind:t.kind??null,...t.projectId?{projectId:t.projectId}:{},limit:f,totalMatches:R.length,truncated:R.length>X.length||E&&Object.values(C).some(n=>n>0),entities:X,relatedEntities:$,relations:se,proofs:ie,...E?{budget:{mode:"agent",limits:{...b},omitted:C}}:{}}}export{le as a,F as b,H as c,Ae as d,Ce as e,Be as f,Ge as g};

package/dist/chunk-5K4O3TAW.js

@@ -0,0 +1,4 @@
+import {f,e}from'./chunk-XF65LQ6M.js';import {a as a$1,b as b$2}from'./chunk-X7FYEKLI.js';import {c,d as d$2}from'./chunk-N4B2M44I.js';import {a,b}from'./chunk-COOVCORC.js';import {j,i}from'./chunk-E42IFQFR.js';import {d}from'./chunk-ROOPODG6.js';import {a as a$2,h as h$1}from'./chunk-BLEIUQL6.js';import {b as b$1}from'./chunk-VN2MKTQO.js';import {t}from'./chunk-VQZ5PI5J.js';import {q as q$1,p as p$1}from'./chunk-ODK4LCEL.js';import p from'chalk';import d$1 from'fs';import h from'path';var H=p$1.readiness;function U(n){return n.vulnerableDependencies>0?`${n.vulnerableDependencies} known dependency vulnerability finding(s) reported`:`${n.blockingFindings} blocking dependency/security finding(s) reported`}var q=q$1.readiness;function B(n){let t=A(n,"workspace.contract.json");if(!d$1.existsSync(t))return [];try{let e=JSON.parse(d$1.readFileSync(t,"utf-8"));return (Array.isArray(e.projects)?e.projects:[]).map(i=>{let c=m(i),o=typeof c.externalPath=="string"?c.externalPath.trim():"",s=typeof c.relativePath=="string"?c.relativePath.trim():"",r=o||s;return r?d(n,s||r,o?{absolutePath:o}:{}):""}).filter(Boolean)}catch{return []}}function Q(n,t){let e=h.resolve(n);if(!b(e))return e;let a=A(t,"workspace.contract.json");if(d$1.existsSync(a))try{let o=JSON.parse(d$1.readFileSync(a,"utf-8")),s=Array.isArray(o.projects)?o.projects:[];for(let r of s){let f=m(r),y=typeof f.externalPath=="string"?f.externalPath.trim():"",g=typeof f.relativePath=="string"?f.relativePath.trim():"";if(y||g)return d(t,g||y,y?{absolutePath:y}:{})}}catch{}let i=T(t),c=Array.isArray(i.payload?.projects)?i.payload.projects:[];for(let o of c){let s=m(o),r=typeof s.path=="string"?s.path.trim():"";if(r)return h.resolve(r)}return e}function _(n){let t=j(n);return i(t,n)}function J(n,t){if(!d$1.existsSync(n))return null;let e=d$1.readdirSync(n).filter(a=>a.endsWith(".json")&&t.some(i=>i.test(a))).map(a=>h.join(n,a));return e.length===0?null:(e.sort((a,i)=>d$1.statSync(i).mtimeMs-d$1.statSync(a).mtimeMs),e[0])}function m(n){return n&&typeof n=="object"&&!Array.isArray(n)?n:{}}function M(n){for(let t of n)if(d$1.existsSync(t))return t;return null}function A(n,...t$1){let e=t(n,...t$1);return M(e)??e[0]}function E(n,t){let e=a$2(n,`.workspai/reports/${t}`);return M([e,h.join(n,".rapidkit","reports",t)])??e}async function X(n){let{readWorkspaceRegistrySummary:t,resolveWorkspaceRegisteredProjects:e}=await import('./workspace-registry-summary-Y3ET36NH.js'),a=await t(n);return a?a.projectCount:(await e(n)).summary.projectCount}function Y(n,t,e){let a=A(n,"toolchain.lock");if(!d$1.existsSync(a))return {gate:"env",status:"fail",summary:"toolchain.lock is missing",details:["Run workspai bootstrap to pin runtime versions and generate a reproducible toolchain."],evidencePath:a};try{let i=JSON.parse(d$1.readFileSync(a,"utf-8")),c=m(i.runtime),o=["python","node","go","java","dotnet","rust","php"],s=o.filter(l=>{let u=m(c[l]);return typeof u.version=="string"&&u.version.trim().length>0});if(s.length===0)return {gate:"env",status:"fail",summary:"No runtime versions are pinned in toolchain.lock",details:["Pin at least one runtime version via workspai setup <runtime> and re-run bootstrap."],evidencePath:a};let r=[...new Set((Array.isArray(t)?t:[t]).filter(l=>l!=="unknown"))],f=r.filter(l=>o.includes(l)),y=r.filter(l=>!o.includes(l)),g=f.filter(l=>{let u=m(c[l]);return typeof u.version!="string"||u.version.trim().length===0});return g.length>0?{gate:"env",status:"fail",summary:`${e?.hasRegisteredProjects?"Project runtime":"Workspace"}${g.length===1?"":"s"} (${g.join(", ")}) ${g.length===1?"is":"are"} not pinned in toolchain.lock`,details:g.map(u=>`Run workspai setup ${u} and workspai bootstrap to lock ${u} for this workspace.`),evidencePath:a}:y.length>0?{gate:"env",status:"warn",summary:`${e?.hasRegisteredProjects?"Project runtime":"Workspace"}${y.length===1?"":"s"} (${y.join(", ")}) cannot be verified by toolchain.lock`,details:[`Pinned Workspai runtimes (${s.join(", ")}) do not prove the ${y.join(", ")} compiler or runtime toolchain.`,"Declare and verify this runtime or toolchain through the project command contract or organization CI policy."],evidencePath:a}:{gate:"env",status:"pass",summary:`Pinned runtimes: ${s.join(", ")}`,details:[],evidencePath:a}}catch{return {gate:"env",status:"fail",summary:"toolchain.lock is invalid JSON",details:["Regenerate lockfile with workspai bootstrap."],evidencePath:a}}}function T(n){let t=E(n,"doctor-last-run.json");if(!d$1.existsSync(t))return {payload:null,path:t};try{let e=JSON.parse(d$1.readFileSync(t,"utf-8"));return c(e,"workspace")?(d$2(e),{payload:e,path:t}):{payload:null,path:t}}catch{return {payload:null,path:t}}}function Z(n){let t=T(n);if(!t.payload)return {gate:{gate:"doctor",status:"fail",summary:"Doctor evidence is missing",details:["Run workspai doctor workspace --json before release readiness checks."],evidencePath:t.path},payload:null};let e=a$1(t.payload);if(e.hasSystemErrors)return {gate:{gate:"doctor",status:"fail",summary:"Doctor reported system errors",details:["Resolve system-level doctor errors before proceeding."],evidencePath:t.path},payload:t.payload};if(e.blockingFindings>0)return {gate:{gate:"doctor",status:"fail",summary:`Doctor reported ${e.blockingFindings} blocking finding(s)`,details:["Resolve the canonical Doctor findings and regenerate fresh Doctor evidence."],evidencePath:t.path},payload:t.payload};let a=[...e.advisoryFindings>0?[`${e.advisoryFindings} advisory finding(s)`]:[],...e.unknownFindings>0?[`${e.unknownFindings} unknown finding(s)`]:[],...e.contradictionCount>0?[`${e.contradictionCount} evidence contradiction(s)`]:[],...e.missingDiagnosisProjects>0?[`${e.missingDiagnosisProjects} project(s) without canonical diagnosis`]:[],...e.staleEvidence?["stale Doctor evidence"]:[],...e.unknownFreshness?["unknown Doctor evidence freshness"]:[],...e.minimumDiagnosisCompleteness<100?[`diagnosis completeness ${e.minimumDiagnosisCompleteness}%`]:[]];return a.length>0?{gate:{gate:"doctor",status:"warn",summary:"Doctor evidence requires attention",details:a,evidencePath:t.path},payload:t.payload}:{gate:{gate:"doctor",status:"pass",summary:"Doctor checks passed without issues",details:[],evidencePath:t.path},payload:t.payload}}function ee(n){let t=E(n,"analyze-last-run.json");if(!d$1.existsSync(t))return {gate:"analyze",status:"fail",summary:"Analyze evidence is missing",details:["Run workspai analyze --json before release readiness checks."],evidencePath:t};try{let e=JSON.parse(d$1.readFileSync(t,"utf-8"));b$1(p$1.analyze,e,t);let a=m(e.summary),i=String(a.verdict??"").toLowerCase(),c=Number(a.score??0),o=m(a.findings),s=Number(o.fail??0);return i==="blocked"||s>0?{gate:"analyze",status:"fail",summary:`Analyze verdict is blocked (score ${c}/100)`,details:["Resolve analyze findings and regenerate analyze-last-run.json."],evidencePath:t}:i==="needs-attention"?{gate:"analyze",status:"warn",summary:`Analyze needs attention (score ${c}/100)`,details:["Review analyze warnings before release."],evidencePath:t}:{gate:"analyze",status:"pass",summary:`Analyze passed (score ${c}/100)`,details:[],evidencePath:t}}catch{return {gate:"analyze",status:"fail",summary:"Analyze evidence is invalid or violates its contract",details:["Re-run workspai analyze --json to regenerate evidence."],evidencePath:t}}}function te(n){try{let t=JSON.parse(d$1.readFileSync(n,"utf-8")),e=String(t.status??"").toLowerCase(),a=m(t.summary),i=Number(a.failedChecks??0);return e==="fail"||i>0?{gate:"verify",status:"fail",summary:"Verify-pack contract reports failed checks",details:["Fix failed verify checks and regenerate verify-pack contract evidence."],evidencePath:n}:e==="pass"?{gate:"verify",status:"pass",summary:"Verify-pack contract passed",details:[],evidencePath:n}:{gate:"verify",status:"warn",summary:"Verify-pack contract status is not explicit",details:["Ensure contract status is pass/fail and keep schema aligned with v1 contract."],evidencePath:n}}catch{return {gate:"verify",status:"fail",summary:"Verify-pack contract is invalid JSON",details:["Regenerate verify-pack contract artifact."],evidencePath:n}}}async function ne(n,t){if(t.skipVerify)return {gate:"verify",status:"pass",summary:"Verify gate skipped (--skip-verify)",details:["Verification was explicitly skipped for this readiness run."]};let e=[a$2(n,".workspai/reports"),h.join(n,".rapidkit","reports")],a=e[0],i=e.map(s=>J(s,[/verify-pack-contract/i,/^verify.*\.json$/i])).find(s=>typeof s=="string")??null;if(i)return te(i);let c=a$2(n,p$1.contractVerify),o=e.map(s=>J(s,[/workspace-contract-verify-last-run/i,/workspace-contract-verify/i])).find(s=>typeof s=="string")??null;if(o)try{let s=JSON.parse(d$1.readFileSync(o,"utf-8")),r=String(s.status??"").toLowerCase();if(r==="passed"||r==="pass")return {gate:"verify",status:"pass",summary:"Workspace contract verification passed (CLI cache)",details:[],evidencePath:o};if(r==="failed"||r==="fail")return {gate:"verify",status:"fail",summary:"Workspace contract verification failed (CLI cache)",details:(Array.isArray(s.violations)?s.violations:[]).slice(0,5),evidencePath:o}}catch{}try{let{verifyWorkspaceContract:s}=await import('./workspace-contract-FPLFL4G3.js'),r=await s({workspacePath:n}),f={schemaVersion:"v1",source:"cli",generatedAt:new Date().toISOString(),status:r.status,contractPath:r.contractPath,projectCount:r.projectCount,checks:r.checks,violations:r.violations};return await h$1(n,p$1.contractVerify,f),r.status==="failed"?{gate:"verify",status:"fail",summary:"Workspace contract verification failed (CLI)",details:r.violations.slice(0,5),evidencePath:c}:{gate:"verify",status:"pass",summary:"Workspace contract verification passed (CLI)",details:[],evidencePath:c}}catch(s){return {gate:"verify",status:"fail",summary:"No verify evidence and workspace contract verification unavailable",details:["Run workspai workspace contract verify --json or export verify-pack contract from CI.",s instanceof Error?s.message:String(s)],evidencePath:h.join(a,"*verify*.json")}}}function ae(n,t){let e=E(t,"doctor-last-run.json");if(!n)return {gate:"dependency",status:"warn",summary:"Dependency risk check skipped (doctor evidence missing)",details:["Run workspai doctor workspace --json to include dependency findings."],evidencePath:e};let a=b$2(n);return a.blockingFindings>0||a.vulnerableDependencies>0?{gate:"dependency",status:"fail",summary:U(a),details:["Resolve the typed dependency/security findings and regenerate focused audit evidence."],evidencePath:e}:a.auditFailed>0?{gate:"dependency",status:"fail",summary:`${a.auditFailed} dependency audit(s) failed`,details:["Repair the audit runner or dependency environment; failed audits are not clean."],evidencePath:e}:a.missingDependencies>0||a.auditUnavailable>0||a.unknownFindings>0||a.advisoryFindings>0?{gate:"dependency",status:"warn",summary:"Dependency evidence is incomplete or requires attention",details:[...a.missingDependencies>0?[`${a.missingDependencies} project(s) have no materialized dependency tree.`]:[],...a.auditUnavailable>0?[`${a.auditUnavailable} audit provider(s) are unavailable or unsupported.`]:[],...a.unknownFindings>0?[`${a.unknownFindings} dependency/security finding(s) remain unknown.`]:[],...a.advisoryFindings>0?[`${a.advisoryFindings} dependency/security advisory finding(s) remain.`]:[]],evidencePath:e}:{gate:"dependency",status:"pass",summary:"No dependency vulnerabilities reported",details:[],evidencePath:e}}function se(n){return n.some(t=>t.status==="fail")?"fail":n.some(t=>t.status==="warn")?"warn":"pass"}async function re(n,t){return h$1(n,H,t)}async function ie(n={}){let t=h.resolve(n.startPath??process.cwd()),e$1=a(t)??t,a$1=await X(e$1)>0,i=a$1&&b(t)?e$1:Q(t,e$1),c=i===e$1?"unknown":_(i),o=a$1?c:"unknown";if(a$1&&i===e$1){let{resolveWorkspaceRegisteredProjects:v}=await import('./workspace-registry-summary-Y3ET36NH.js'),K=await v(e$1),C=B(e$1);o=(C.length>0?C:K.summary.projects.map(S=>d(e$1,S.relativePath))).map(S=>_(S));}let s=Y(e$1,o,{hasRegisteredProjects:a$1}),r=Z(e$1),f$1=ee(e$1),y=await ne(e$1,{skipVerify:n.skipVerify}),g=ae(r.payload,e$1),l=[s,r.gate,f$1,y,g],u=se(l),k={schemaVersion:q,generatedAt:new Date().toISOString(),workspacePath:e$1,projectPath:i,action:n.action,overallStatus:u,blocking:u==="fail",blockingReasons:l.filter(v=>v.status==="fail").map(v=>`${v.gate}: ${v.summary}`),gates:l};if(n.writeReport!==false){let v=f(k,{commandId:"workspaceReadiness",exitCode:u==="fail"?2:u==="warn"?1:0,generatedAt:k.generatedAt,blockers:k.blockingReasons,runId:e()});k.evidencePath=await re(e$1,v);}return k}function oe(n){return n==="pass"?p.green("PASS"):n==="warn"?p.yellow("WARN"):p.red("FAIL")}function ce(n){return n==="pass"?p.green("PASS"):n==="warn"?p.yellow("WARN"):p.red("FAIL")}async function je(n){let t=await ie({startPath:n.workspace,writeReport:true,skipVerify:n.skipVerify===true});if(n.json)console.log(JSON.stringify(t,null,2));else {console.log(p.bold.cyan(`
+\u{1F6A6} Workspai Release Readiness
+`)),console.log(p.bold(`Workspace: ${p.cyan(h.basename(t.workspacePath))}`)),console.log(p.gray(`Path: ${t.workspacePath}`)),console.log(`Overall: ${ce(t.overallStatus)}`);for(let e of t.gates){console.log(` - ${e.gate}: ${oe(e.status)} ${e.summary}`);for(let a of e.details)console.log(p.gray(`   ${a}`));e.evidencePath&&console.log(p.gray(`   evidence: ${e.evidencePath}`));}t.evidencePath&&console.log(p.gray(`
+Evidence saved: ${t.evidencePath}`));}n.strict&&t.overallStatus!=="pass"&&process.exit(1);}export{ie as a,je as b};