Modules and Dependency Lifecycle

Modules and dependencies are runtime-scoped project capabilities. Workspai uses the detected project adapter, module contracts, and current toolchain evidence instead of applying one package-manager recipe to every project.

Inspect before mutation

npx workspai modules

The inventory distinguishes supported, installed, missing, incompatible, and unknown capability state. Unknown is not equivalent to absent.

Governed lifecycle

npx workspai add db_postgres

npx workspai upgrade

npx workspai reconcile

npx workspai rollback

An operation should validate runtime compatibility, checkpoint supported state, apply the smallest bounded mutation, refresh evidence, and verify the result. Dependency-security repairs use the same durable transaction principles as other repairs: immutable proposal, explicit authority, checkpoint, validation, verification, and rollback.

If a required executable is unavailable, the operation returns actionable toolchain setup evidence. It must not fall through to an unrelated installer or claim the dependency tree is healthy.

See add, modules, upgrade, reconcile, and rollback.