akm-cli 0.10.261012-beta → 0.10.261014-beta

package/dist/setup/detected-engines.js

@@ -1,136 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-const CHAT_SUFFIX = "/chat/completions";
-export function normalizeChatCompletionsEndpoint(input) {
-    const url = new URL(input);
-    if (url.protocol !== "http:" && url.protocol !== "https:")
-        throw new Error("endpoint must use http or https");
-    if (url.username || url.password || url.search || url.hash)
-        throw new Error("endpoint cannot contain credentials, query, or fragment");
-    let pathname = url.pathname.replace(/\/+$/, "");
-    if (!pathname.endsWith(CHAT_SUFFIX)) {
-        if (!pathname.endsWith("/v1") && !pathname.includes("/openai"))
-            pathname += "/v1";
-        pathname += CHAT_SUFFIX;
-    }
-    url.pathname = pathname;
-    return url.toString().replace(/\/$/, "");
-}
-export function engineFingerprint(engine) {
-    return engine.kind === "llm"
-        ? `llm:${normalizeChatCompletionsEndpoint(engine.endpoint)}`
-        : `agent:${engine.platform}`;
-}
-export async function verifyOpenAiCompatibleEndpoint(candidate, fetchFn = fetch) {
-    let endpoint;
-    try {
-        endpoint = normalizeChatCompletionsEndpoint(candidate.endpoint);
-    }
-    catch (error) {
-        return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-    }
-    if (!candidate.model.trim())
-        return { ok: false, reason: "no detected model" };
-    const credential = candidate.apiKeyEnvVar ? process.env[candidate.apiKeyEnvVar] : undefined;
-    if (candidate.apiKeyEnvVar && !credential) {
-        return { ok: false, reason: `required credential ${candidate.apiKeyEnvVar} is unavailable` };
-    }
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 10_000);
-    timer.unref?.();
-    try {
-        const response = await fetchFn(endpoint, {
-            method: "POST",
-            headers: {
-                "content-type": "application/json",
-                ...(credential ? { authorization: `Bearer ${credential}` } : {}),
-            },
-            body: JSON.stringify({
-                model: candidate.model,
-                messages: [{ role: "user", content: "Reply OK" }],
-                max_tokens: 1,
-                stream: false,
-            }),
-            signal: controller.signal,
-        });
-        if (!response.ok)
-            return { ok: false, reason: `HTTP ${response.status}` };
-        const body = (await response.json());
-        if (typeof body.choices?.[0]?.message?.content !== "string") {
-            return { ok: false, reason: "response did not contain choices[0].message.content" };
-        }
-        return { ok: true, endpoint };
-    }
-    catch (error) {
-        return { ok: false, reason: error instanceof Error ? error.message : String(error) };
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-function slug(value) {
-    const normalized = value
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-")
-        .replace(/^-|-$/g, "");
-    return normalized && /^[a-z]/.test(normalized) ? normalized : "local";
-}
-function availableName(config, preferred, fingerprint) {
-    for (const [name, engine] of Object.entries(config.engines ?? {}).sort(([left], [right]) => left.localeCompare(right))) {
-        if (engineFingerprint(engine) === fingerprint)
-            return name;
-    }
-    const base = slug(preferred);
-    if (!config.engines?.[base])
-        return base;
-    for (let suffix = 2;; suffix++) {
-        const candidate = `${base}-${suffix}`;
-        if (!config.engines?.[candidate])
-            return candidate;
-    }
-}
-/** Insert or reuse an LLM engine by canonical endpoint without modifying a match. */
-export function upsertDetectedLlmEngine(config, candidate) {
-    const endpoint = normalizeChatCompletionsEndpoint(candidate.endpoint);
-    const fingerprint = `llm:${endpoint}`;
-    const name = availableName(config, candidate.provider, fingerprint);
-    const existing = config.engines?.[name];
-    const reused = existing !== undefined && engineFingerprint(existing) === fingerprint;
-    const engines = reused
-        ? config.engines
-        : {
-            ...(config.engines ?? {}),
-            [name]: {
-                kind: "llm",
-                provider: candidate.provider,
-                endpoint,
-                model: candidate.model,
-                ...(candidate.apiKeyEnvVar ? { apiKey: `\${${candidate.apiKeyEnvVar}}` } : {}),
-            },
-        };
-    const defaults = { ...(config.defaults ?? {}) };
-    const currentDefault = defaults.llmEngine;
-    if (!currentDefault ||
-        (config.engines?.[currentDefault] && engineFingerprint(config.engines[currentDefault]) === fingerprint)) {
-        defaults.llmEngine = name;
-    }
-    if (!defaults.engine)
-        defaults.engine = defaults.llmEngine ?? name;
-    return { config: { ...config, engines, defaults }, name, reused };
-}
-/** Insert or reuse an agent engine by canonical platform without modifying a match. */
-export function upsertDetectedAgentEngine(config, platform) {
-    const fingerprint = `agent:${platform}`;
-    const name = availableName(config, platform, fingerprint);
-    const existing = config.engines?.[name];
-    const reused = existing !== undefined && engineFingerprint(existing) === fingerprint;
-    const engines = reused ? config.engines : { ...(config.engines ?? {}), [name]: { kind: "agent", platform } };
-    const defaults = { ...(config.defaults ?? {}) };
-    const currentDefault = defaults.engine;
-    if (!currentDefault ||
-        (config.engines?.[currentDefault] && engineFingerprint(config.engines[currentDefault]) === fingerprint)) {
-        defaults.engine = name;
-    }
-    return { config: { ...config, engines, defaults }, name, reused };
-}

package/dist/setup/engine-config.js

@@ -1,97 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-import { ConfigError } from "../core/errors.js";
-export function readCurrentLlmEngine(config) {
-    const name = config.defaults?.llmEngine;
-    const engine = name ? config.engines?.[name] : undefined;
-    if (!engine || engine.kind !== "llm")
-        return undefined;
-    const { kind: _kind, timeoutMs, ...connection } = engine;
-    return {
-        ...connection,
-        ...(timeoutMs !== undefined ? { timeoutMs } : {}),
-    };
-}
-export function readAgentEngineSelection(config) {
-    const engines = {};
-    for (const [name, engine] of Object.entries(config.engines ?? {})) {
-        if (engine.kind === "agent")
-            engines[name] = { ...engine };
-    }
-    const defaultName = config.defaults?.engine;
-    const defaultIsAgent = defaultName && config.engines?.[defaultName]?.kind === "agent";
-    if (Object.keys(engines).length === 0 && !defaultIsAgent)
-        return undefined;
-    return { ...(defaultIsAgent ? { default: defaultName } : {}), engines };
-}
-/** Write an OpenAI-compatible connection as a named LLM engine. */
-export function writeLlmEngine(config, llm) {
-    const name = config.defaults?.llmEngine ?? "default";
-    if (!llm) {
-        const engines = { ...(config.engines ?? {}) };
-        if (engines[name]?.kind === "llm")
-            delete engines[name];
-        const defaults = { ...(config.defaults ?? {}) };
-        delete defaults.llmEngine;
-        if (defaults.engine === name)
-            delete defaults.engine;
-        return { engines, defaults };
-    }
-    if (config.engines?.[name] && config.engines[name].kind !== "llm") {
-        throw new ConfigError(`Cannot configure LLM engine ${JSON.stringify(name)} because that name belongs to an agent engine.`, "INVALID_CONFIG_FILE");
-    }
-    const endpoint = llm.endpoint.endsWith("/chat/completions")
-        ? llm.endpoint
-        : `${llm.endpoint.replace(/\/$/, "")}/chat/completions`;
-    return {
-        engines: {
-            ...(config.engines ?? {}),
-            [name]: {
-                ...llm,
-                kind: "llm",
-                endpoint,
-            },
-        },
-        defaults: { ...(config.defaults ?? {}), engine: config.defaults?.engine ?? name, llmEngine: name },
-    };
-}
-/** Merge setup-selected agent engines without translating profile-shaped data. */
-export function writeAgentEngines(config, selection) {
-    for (const [name, engine] of Object.entries(selection?.engines ?? {})) {
-        const existing = config.engines?.[name];
-        if (existing && existing.kind !== engine.kind) {
-            throw new ConfigError(`Cannot configure ${engine.kind} engine ${JSON.stringify(name)} because that name belongs to an ${existing.kind} engine.`, "INVALID_CONFIG_FILE");
-        }
-    }
-    const defaults = { ...(config.defaults ?? {}) };
-    if (selection?.disabled) {
-        const currentDefault = defaults.engine;
-        if (currentDefault && config.engines?.[currentDefault]?.kind === "agent") {
-            const llmDefault = defaults.llmEngine;
-            if (llmDefault && config.engines?.[llmDefault]?.kind === "llm")
-                defaults.engine = llmDefault;
-            else
-                delete defaults.engine;
-        }
-    }
-    if (selection?.default)
-        defaults.engine = selection.default;
-    const engines = { ...(config.engines ?? {}), ...(selection?.engines ?? {}) };
-    const selectedEngine = selection?.default ? engines[selection.default] : undefined;
-    if (selection?.default && selectedEngine && selectedEngine.kind !== "agent") {
-        throw new ConfigError(`Cannot select agent engine ${JSON.stringify(selection.default)} because that name belongs to an LLM engine.`, "INVALID_CONFIG_FILE");
-    }
-    if (selection?.default && !engines[selection.default]) {
-        engines[selection.default] = {
-            kind: "agent",
-            platform: selection.default,
-        };
-    }
-    return { engines, defaults };
-}
-export function cloneLlmConnection(llm) {
-    if (!llm)
-        return undefined;
-    return JSON.parse(JSON.stringify(llm));
-}

package/dist/setup/harness-config-import.js

@@ -1,47 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * Pluggable registry of LLM config importers for supported agent harnesses.
- *
- * Each importer detects whether a harness is installed (filesystem only,
- * no network) and, if so, reads its config to extract LLM connection details.
- * API key VALUES are never stored — only the env var names that hold them.
- *
- * To add a new harness importer: declare `configImporter` on the harness
- * descriptor (`integrations/harnesses/<id>/index.ts`).
- *
- * NOTE: The `detect()` method in each importer overlaps intentionally with
- * `detectAgentPlatforms()` in `detect.ts`. That function scans for harness
- * presence to display installed platforms to the user; these importers go
- * further by reading and parsing the harness config. They serve different
- * purposes and should not be deduplicated.
- */
-import { HARNESS_REGISTRY } from "../integrations/harnesses/index.js";
-/** Importers declared by the registered harnesses, in registry order. */
-export const HARNESS_CONFIG_IMPORTERS = HARNESS_REGISTRY.flatMap((h) => h.configImporter ? [h.configImporter] : []);
-/**
- * Run all importers whose `detect()` returns `true` and collect their configs.
- *
- * Pure function — filesystem reads only, no network, no side effects.
- * Individual importer failures are swallowed so one broken harness never
- * blocks the setup wizard.
- *
- * @returns List of detected harness configs (may be empty).
- */
-export function detectHarnessConfigs() {
-    const results = [];
-    for (const importer of HARNESS_CONFIG_IMPORTERS) {
-        try {
-            if (!importer.detect())
-                continue;
-            const config = importer.importConfig();
-            if (config)
-                results.push(config);
-        }
-        catch {
-            // Never let one importer crash the whole detection
-        }
-    }
-    return results;
-}

package/dist/setup/providers.js

@@ -1,14 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * Endpoint + default model for each cloud provider akm can recommend from a
- * detected API key. A provider absent from this table yields no recommendation
- * (the previous paired `switch`es both returned `undefined`).
- */
-export const PROVIDER_DEFAULTS = {
-    anthropic: { endpoint: "https://api.anthropic.com/v1", model: "claude-sonnet-4-5" },
-    openai: { endpoint: "https://api.openai.com/v1", model: "gpt-4o-mini" },
-    gemini: { endpoint: "https://generativelanguage.googleapis.com/v1beta/openai", model: "gemini-1.5-flash" },
-    groq: { endpoint: "https://api.groq.com/openai/v1", model: "llama-3.3-70b-versatile" },
-};

package/dist/setup/steps/semantic.js

@@ -1,39 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * Setup wizard step: enable/disable semantic search and decide whether to
- * prepare its assets now.
- */
-import * as p from "../../cli/clack.js";
-import { prompt } from "../prompt.js";
-import { describeSemanticSearchAssets, isRemoteEmbeddingConfig } from "../semantic-assets.js";
-export async function stepSemanticSearch(
-// Owner ruling 9 (R-039): the runtime default is "off" (a bare/headless
-// install must never silently pull the ~130 MB model), but the interactive
-// wizard pre-selects semantic search ON — a human is present to read the
-// warning below and decide. `_current` is intentionally unused for the
-// enable/disable pre-selection below: it must NOT track
-// `semanticSearchMode`, or this pre-selection would silently flip to off
-// along with the runtime default. Kept in the signature for call-site
-// stability (callers pass the in-progress setup config positionally).
-_current, embedding) {
-    // Show the warning (asset sizes; "no local model download" when a remote
-    // embedding endpoint is configured) BEFORE the prompt so the pre-checked
-    // default is an informed choice, not a surprise.
-    p.note(describeSemanticSearchAssets(embedding).join("\n"), "Semantic Search Assets");
-    const enabled = await prompt(() => p.confirm({
-        message: "Enable semantic search?",
-        initialValue: true,
-    }));
-    if (!enabled) {
-        return { mode: "off", prepareAssets: false };
-    }
-    const prepareAssets = await prompt(() => p.confirm({
-        message: isRemoteEmbeddingConfig(embedding)
-            ? "Check the embedding endpoint and verify semantic search now?"
-            : "Download and verify semantic-search assets now?",
-        initialValue: true,
-    }));
-    return { mode: "auto", prepareAssets };
-}

package/dist/workflows/authoring/scope-key.js

@@ -1,79 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-import { createHash } from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
-import { isWithin, resolveStashDir, safeRealpath, toPosix } from "../../core/common.js";
-const PROJECT_CONFIG_RELATIVE_PATH = path.join(".akm", "config.json");
-export function getCurrentWorkflowScopeKey() {
-    const anchor = resolveWorkflowScopeAnchor(process.cwd());
-    const normalized = normalizeScopePath(anchor);
-    const digest = createHash("sha256").update(normalized).digest("hex");
-    return `dir:v1:${digest}`;
-}
-export function resolveWorkflowScopeAnchor(startDir) {
-    const cwd = safeRealpath(startDir);
-    const projectRoot = findNearestProjectConfigRoot(cwd);
-    if (projectRoot)
-        return projectRoot;
-    const gitRoot = findNearestGitRoot(cwd);
-    if (gitRoot)
-        return gitRoot;
-    try {
-        const stashDir = safeRealpath(resolveStashDir());
-        if (isWithin(cwd, stashDir))
-            return stashDir;
-    }
-    catch {
-        // Ignore stash resolution failures and fall back to cwd.
-    }
-    return cwd;
-}
-function findNearestProjectConfigRoot(startDir) {
-    let currentDir = startDir;
-    while (true) {
-        const configPath = path.join(currentDir, PROJECT_CONFIG_RELATIVE_PATH);
-        if (isFile(configPath)) {
-            return safeRealpath(currentDir);
-        }
-        const parentDir = path.dirname(currentDir);
-        if (parentDir === currentDir)
-            return null;
-        currentDir = parentDir;
-    }
-}
-function findNearestGitRoot(startDir) {
-    let currentDir = startDir;
-    while (true) {
-        const gitPath = path.join(currentDir, ".git");
-        if (exists(gitPath)) {
-            return safeRealpath(currentDir);
-        }
-        const parentDir = path.dirname(currentDir);
-        if (parentDir === currentDir)
-            return null;
-        currentDir = parentDir;
-    }
-}
-function exists(candidate) {
-    try {
-        fs.accessSync(candidate, fs.constants.F_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function isFile(candidate) {
-    try {
-        return fs.statSync(candidate).isFile();
-    }
-    catch {
-        return false;
-    }
-}
-function normalizeScopePath(value) {
-    const posix = toPosix(value);
-    return process.platform === "win32" ? posix.toLowerCase() : posix;
-}

package/dist/workflows/exec/lowering-notices.js

@@ -1,23 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-import { canonicalJson } from "../ir/plan-hash.js";
-/**
- * Merge safe lowerer diagnostics in first-seen order.
- *
- * Notices are live execution metadata only: this helper is deliberately used
- * by executor/report/output paths, never by result/evidence journal writers.
- * Canonical JSON includes `details`, so two genuinely different structured
- * diagnostics are not collapsed merely because their headline fields match.
- */
-export function mergeLoweringNotices(...groups) {
-    const merged = new Map();
-    for (const group of groups) {
-        for (const notice of group ?? []) {
-            const key = canonicalJson(notice);
-            if (!merged.has(key))
-                merged.set(key, notice);
-        }
-    }
-    return merged.size > 0 ? [...merged.values()] : undefined;
-}

package/dist/workflows/source-semantics.js

@@ -1,110 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/** Semantic checks for the Markdown workflow grammar (`parser.ts`). */
-import fs from "node:fs";
-import path from "node:path";
-export class WorkflowSourceSemanticError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.code = code;
-        this.name = "WorkflowSourceSemanticError";
-    }
-}
-export function canonicalizeWorkflowWorkingDirectory(value, workspaceRoot) {
-    if (hasControlCharacter(value)) {
-        throw new WorkflowSourceSemanticError("working-directory-control-character", "working-directory may not contain NUL or control characters.");
-    }
-    if (value === "" || value.trim() === "") {
-        throw new WorkflowSourceSemanticError("working-directory-escape", "working-directory must be a non-empty relative contained path.");
-    }
-    const portable = value.replaceAll("\\", "/");
-    const segments = portable.split("/");
-    if (path.posix.isAbsolute(portable) ||
-        path.win32.isAbsolute(value) ||
-        portable.startsWith("~") ||
-        segments.some((segment) => segment === "" || segment === "..")) {
-        throw new WorkflowSourceSemanticError("working-directory-escape", "working-directory must be relative and contained.");
-    }
-    const withoutDots = segments.filter((segment) => segment !== ".");
-    const canonical = withoutDots.length === 0 ? "." : withoutDots.join("/");
-    if (workspaceRoot !== undefined)
-        verifyPhysicalContainment(workspaceRoot, canonical);
-    return canonical;
-}
-function hasControlCharacter(value) {
-    for (const character of value) {
-        const codePoint = character.codePointAt(0) ?? 0;
-        if (codePoint <= 0x1f || codePoint === 0x7f)
-            return true;
-    }
-    return false;
-}
-function verifyPhysicalContainment(workspaceRoot, relative) {
-    let root;
-    try {
-        root = fs.realpathSync(workspaceRoot);
-    }
-    catch {
-        throw new WorkflowSourceSemanticError("working-directory-unverifiable", "Workspace root cannot be physically verified.");
-    }
-    const candidate = path.resolve(root, ...relative.split("/"));
-    if (!contained(root, candidate)) {
-        throw new WorkflowSourceSemanticError("working-directory-escape", "working-directory escapes the workspace.");
-    }
-    let current = root;
-    for (const segment of relative === "." ? [] : relative.split("/")) {
-        current = path.join(current, segment);
-        try {
-            const entry = fs.lstatSync(current);
-            if (entry.isSymbolicLink()) {
-                let physical;
-                try {
-                    physical = fs.realpathSync(current);
-                }
-                catch {
-                    throw new WorkflowSourceSemanticError("working-directory-unverifiable", "working-directory contains a dangling or unresolvable symlink.");
-                }
-                if (!contained(root, physical)) {
-                    throw new WorkflowSourceSemanticError("working-directory-escape", "working-directory resolves through a symlink outside the workspace.");
-                }
-                let target;
-                try {
-                    target = fs.statSync(current);
-                }
-                catch {
-                    throw new WorkflowSourceSemanticError("working-directory-unverifiable", "working-directory symlink target cannot be physically verified.");
-                }
-                if (!target.isDirectory()) {
-                    throw new WorkflowSourceSemanticError("working-directory-unverifiable", "working-directory must resolve through directories.");
-                }
-                continue;
-            }
-            if (!entry.isDirectory()) {
-                throw new WorkflowSourceSemanticError("working-directory-unverifiable", "working-directory must resolve through directories.");
-            }
-            const physical = fs.realpathSync(current);
-            if (!contained(root, physical)) {
-                throw new WorkflowSourceSemanticError("working-directory-escape", "working-directory resolves through a symlink outside the workspace.");
-            }
-        }
-        catch (cause) {
-            if (cause instanceof WorkflowSourceSemanticError)
-                throw cause;
-            const code = cause?.code;
-            if (code === "ENOENT") {
-                // A genuinely absent lexical component is allowed at source time; the
-                // runtime dispatch boundary revalidates containment when it appears.
-                // `lstat` distinguishes this from a dangling symlink, which fails
-                // closed above even before its target can appear.
-                return;
-            }
-            throw new WorkflowSourceSemanticError("working-directory-unverifiable", "working-directory cannot be physically verified.");
-        }
-    }
-}
-function contained(root, candidate) {
-    const relative = path.relative(root, candidate);
-    return relative === "" || (!relative.startsWith(`..${path.sep}`) && relative !== ".." && !path.isAbsolute(relative));
-}