akm-cli 0.7.5 → 0.8.0-rc.10

package/dist/tasks/schema.js

@@ -0,0 +1,15 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * Task asset schema. A task pairs a cron-style schedule with exactly one of:
+ *
+ *   • a workflow target  — invoked via `startWorkflowRun()`
+ *   • a prompt target    — invoked via `runAgent()` against the configured
+ *                          agent harness (e.g. `opencode run`)
+ *   • a command target   — invoked directly via `Bun.spawn()`, no AI agent
+ *
+ * Tasks are stored as pure YAML files at `<stash>/tasks/<id>.yml`. Multi-line
+ * inline prompts use a YAML block scalar (`prompt: |`).
+ */
+export const TASK_SCHEMA_VERSION = 1;

package/dist/tasks/validator.js

@@ -0,0 +1,62 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * Validate a parsed {@link TaskDocument} for runnability.
+ *
+ * Enforces:
+ *   • the schedule is parseable and translates to the active backend
+ *   • the workflow ref resolves (workflow targets)
+ *   • the asset/file source exists (prompt targets)
+ *   • the agent profile resolves (prompt targets)
+ *
+ * Validation is deliberately split from parsing: callers that only want to
+ * read frontmatter (e.g. `tasks list`) can skip these checks, while
+ * `tasks add` and `tasks run` should always run them.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { parseAssetRef } from "../core/asset-ref";
+import { resolveStashDir } from "../core/common";
+import { loadConfig } from "../core/config";
+import { NotFoundError } from "../core/errors";
+import { requireAgentProfile } from "../integrations/agent";
+import { resolveAssetPath } from "../sources/resolve";
+import { parseSchedule } from "./schedule";
+export async function validateTaskDocument(task, options) {
+    // Schedule must parse and translate.
+    parseSchedule(task.schedule, options.backend);
+    if (task.target.kind === "workflow") {
+        const stashDir = options.stashDir ?? resolveStashDir();
+        const ref = parseAssetRef(task.target.ref);
+        if (ref.type !== "workflow") {
+            throw new NotFoundError(`Task "${task.id}" workflow target must be a workflow ref (got "${task.target.ref}").`, "WORKFLOW_NOT_FOUND");
+        }
+        await resolveAssetPath(stashDir, "workflow", ref.name);
+        return;
+    }
+    if (task.target.kind !== "prompt") {
+        return;
+    }
+    // Prompt target. Resolve the profile unconditionally — when no profile is
+    // set on the task, requireAgentProfile falls back to defaults.agent and
+    // throws a clear error if neither is configured. Catching this at
+    // `tasks add` / `tasks sync` time is much more useful than failing only
+    // when the OS scheduler fires.
+    const config = loadConfig();
+    requireAgentProfile(config, task.target.profile);
+    const src = task.target.source;
+    if (src.kind === "asset") {
+        const stashDir = options.stashDir ?? resolveStashDir();
+        const ref = parseAssetRef(src.ref);
+        await resolveAssetPath(stashDir, ref.type, ref.name);
+    }
+    else if (src.kind === "file") {
+        const taskDir = path.dirname(task.source.path);
+        const resolved = path.isAbsolute(src.path) ? src.path : path.resolve(taskDir, src.path);
+        if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile()) {
+            throw new NotFoundError(`Prompt file not found for task "${task.id}": ${src.path} (resolved to ${resolved}).`, "FILE_NOT_FOUND");
+        }
+    }
+    // inline source is always valid post-parse.
+}

package/dist/version.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import fs from "node:fs";
 import path from "node:path";
 // Version: prefer compile-time define, then package.json, then fallback

package/dist/wiki/index-template.md

@@ -0,0 +1,12 @@
+---
+description: Catalog of pages in the {{WIKI_NAME}} wiki. Regenerated by `akm index`.
+wikiRole: index
+---
+
+# {{WIKI_NAME}} — index
+
+_This file is regenerated on every `akm index` run. Manual edits are
+preserved until the next regeneration, then replaced._
+
+_(no pages yet — create one with your editor, or ingest a source with `akm
+wiki stash {{WIKI_NAME}} <path>`.)_

package/dist/wiki/ingest-workflow-template.md

@@ -0,0 +1,54 @@
+# Ingest workflow for wiki:{{WIKI_NAME}}
+
+Wiki location: {{WIKI_DIR}}
+Schema: {{SCHEMA_PATH}}
+
+Follow these steps. akm commands handle the invariants; use your native
+Read/Write/Edit tools for page edits.
+
+1. **Read the schema.** Open `{{SCHEMA_PATH}}`. It defines the voice, page
+   kinds, contradiction policy, and any wiki-specific conventions. Do not
+   skip this step even on familiar wikis — the schema may have changed.
+
+2. **File the source under `raw/`.**
+   ```sh
+   akm wiki stash {{WIKI_NAME}} <path-or-url-to-source>
+   # or: cat <source> | akm wiki stash {{WIKI_NAME}} -
+   ```
+   Returns `{ slug, path, ref }`. The raw copy is immutable — never edit it.
+
+3. **Find related existing pages.**
+   ```sh
+   akm wiki search {{WIKI_NAME}} "<key terms from the source>"
+   ```
+   Read the top hits with `akm show wiki:{{WIKI_NAME}}/<page>`. Use
+   `akm show wiki:{{WIKI_NAME}}/<page> toc` for large pages.
+
+4. **Decide for each candidate.** For each related page:
+   - **Append**: add a section or paragraph under the relevant heading.
+     Include the raw source in the page's `sources:` frontmatter list.
+   - **Contradict**: note the tension explicitly; don't silently overwrite.
+     Follow the schema's contradiction policy.
+   - **Skip**: source doesn't add to this page — move on.
+
+5. **Create new pages for concepts/entities the source introduces.** Each
+   new page must have frontmatter with `description`, `pageKind`,
+   `xrefs`, and `sources`. Cross-reference with related pages both
+   directions.
+
+6. **Update xrefs both ways.** If page A now xrefs page B, page B must xref
+   page A. `akm wiki lint {{WIKI_NAME}}` will flag violations.
+
+7. **Append to `log.md`.** One entry per ingest: date, source slug, one-line
+   summary, refs to created/edited pages. Newest at the top.
+
+8. **Regenerate the index + verify.**
+   ```sh
+   akm index
+   akm wiki lint {{WIKI_NAME}}
+   ```
+   Resolve any lint findings before calling the ingest done.
+
+That's it. `akm` never calls an LLM — reasoning is your job; it just owns
+the invariants (raw immutability, unique slugs, ref validation, index
+regeneration, structural lint).

package/dist/wiki/log-template.md

@@ -0,0 +1,8 @@
+---
+description: Append-only log for the {{WIKI_NAME}} wiki. Newest entries at the top.
+wikiRole: log
+---
+
+# {{WIKI_NAME}} — log
+
+_Each entry: ISO date, operation, brief summary._

package/dist/wiki/schema-template.md

@@ -0,0 +1,61 @@
+---
+description: Rules that govern this wiki. Read before ingesting, searching, or editing pages.
+wikiRole: schema
+---
+
+# {{WIKI_NAME}} wiki schema
+
+This wiki follows the three-layer pattern:
+
+- `raw/` — immutable ingested sources (never edit)
+- `<page>.md` and `<topic>/<page>.md` — agent-authored pages
+- `schema.md` (this file), `index.md`, `log.md` — wiki-level metadata
+
+## Page frontmatter
+
+Every page should carry frontmatter so akm can index and link it:
+
+```yaml
+---
+description: one-sentence summary used in search and lint
+pageKind: entity | concept | question | note | <your-custom-kind>
+xrefs:
+  - wiki:{{WIKI_NAME}}/other-page
+sources:
+  - raw/<slug>.md
+---
+```
+
+`pageKind` accepts any non-empty string. Add new categories freely; they
+will surface in `index.md` as new sections after the next `akm index` run.
+
+## Three operations
+
+### Ingest
+
+1. Copy the new source into `raw/` with `akm wiki stash {{WIKI_NAME}} <path>`.
+2. Find related pages: `akm wiki search {{WIKI_NAME}} "<terms>"`.
+3. For each related page: append a section, note a contradiction, or create a
+   new page. Update xrefs on both sides.
+4. Cite the raw source in each touched page's `sources:` frontmatter.
+5. Append one entry to `log.md` describing what was assimilated.
+
+### Query
+
+1. `akm wiki search {{WIKI_NAME}} "<question>"` — find candidate pages.
+2. `akm show wiki:{{WIKI_NAME}}/<page>` — read the top hits.
+3. Compose the answer from the wiki; cite raw sources only when the wiki
+   points at them.
+
+### Lint
+
+1. `akm wiki lint {{WIKI_NAME}}` — deterministic structural checks.
+2. Resolve each finding: link orphans, fix broken xrefs, add descriptions,
+   cite uncited raws, refresh the index.
+
+## Hard rules
+
+- `raw/` is immutable. Never edit ingested sources.
+- Cross-references must point at pages that actually exist.
+- Prefer appending to an existing page over duplicating one.
+- Cite the raw source id (e.g. `raw/2026-04-foo.md`) when copying claims.

package/dist/wiki/wiki-templates.js

@@ -0,0 +1,15 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+import indexTemplate from "./index-template.md" with { type: "text" };
+import logTemplate from "./log-template.md" with { type: "text" };
+import schemaTemplate from "./schema-template.md" with { type: "text" };
+export function buildSchemaMd(wikiName) {
+    return schemaTemplate.replaceAll("{{WIKI_NAME}}", wikiName);
+}
+export function buildIndexMd(wikiName) {
+    return indexTemplate.replaceAll("{{WIKI_NAME}}", wikiName);
+}
+export function buildLogMd(wikiName) {
+    return logTemplate.replaceAll("{{WIKI_NAME}}", wikiName);
+}

package/dist/wiki/wiki.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Multi-wiki support for akm (issue #119).
  *
@@ -42,12 +45,13 @@ import fs from "node:fs";
 import path from "node:path";
 import { parse as yamlParse } from "yaml";
 import { akmSearch } from "../commands/search";
-import { isWithin } from "../core/common";
-import { loadUserConfig, saveConfig } from "../core/config";
+import { isWithin, todayIso } from "../core/common";
+import { getSources, loadUserConfig, saveConfig } from "../core/config";
 import { NotFoundError, UsageError } from "../core/errors";
 import { parseFrontmatter, parseFrontmatterBlock } from "../core/frontmatter";
 import { resolveSourceEntries } from "../indexer/search-source";
-import { buildIndexMd, buildLogMd, buildSchemaMd } from "../templates/wiki-templates";
+import ingestWorkflowTemplate from "./ingest-workflow-template.md" with { type: "text" };
+import { buildIndexMd, buildLogMd, buildSchemaMd } from "./wiki-templates";
 // ── Constants ───────────────────────────────────────────────────────────────
 export const WIKIS_SUBDIR = "wikis";
 export const SCHEMA_MD = "schema.md";
@@ -399,12 +403,11 @@ export function removeWiki(stashDir, name, options = {}) {
     const isStashWiki = fs.existsSync(wikiDir) && isRecognizedStashWiki(wikiDir);
     if (!isStashWiki && external) {
         const config = loadUserConfig();
-        const filteredSources = (config.sources ?? config.stashes ?? []).filter((entry) => entry.wikiName !== name);
+        const filteredSources = getSources(config).filter((entry) => entry.wikiName !== name);
         const installed = (config.installed ?? []).filter((entry) => entry.wikiName !== name);
         saveConfig({
             ...config,
             sources: filteredSources.length > 0 ? filteredSources : undefined,
-            stashes: undefined,
             installed: installed.length > 0 ? installed : undefined,
         });
         return {
@@ -665,7 +668,7 @@ function withRawFrontmatter(content, slug) {
     // tag the wikiRole for the indexer.
     if (content.startsWith("---"))
         return content;
-    const date = new Date().toISOString().slice(0, 10);
+    const date = todayIso();
     return `---\nwikiRole: raw\ningestedAt: ${date}\nslug: ${slug}\n---\n\n${content}`;
 }
 function ensureTrailingNewline(value) {
@@ -960,60 +963,9 @@ export function regenerateAllWikiIndexes(stashDir) {
 export function buildIngestWorkflow(stashDir, name) {
     const wikiDir = resolveWikiSource(stashDir, name).path;
     const schemaPath = path.join(wikiDir, SCHEMA_MD);
-    const workflow = `# Ingest workflow for wiki:${name}
-
-Wiki location: ${wikiDir}
-Schema: ${schemaPath}
-
-Follow these steps. akm commands handle the invariants; use your native
-Read/Write/Edit tools for page edits.
-
-1. **Read the schema.** Open \`${schemaPath}\`. It defines the voice, page
-   kinds, contradiction policy, and any wiki-specific conventions. Do not
-   skip this step even on familiar wikis — the schema may have changed.
-
-2. **File the source under \`raw/\`.**
-   \`\`\`sh
-   akm wiki stash ${name} <path-or-url-to-source>
-   # or: cat <source> | akm wiki stash ${name} -
-   \`\`\`
-   Returns \`{ slug, path, ref }\`. The raw copy is immutable — never edit it.
-
-3. **Find related existing pages.**
-   \`\`\`sh
-   akm wiki search ${name} "<key terms from the source>"
-   \`\`\`
-   Read the top hits with \`akm show wiki:${name}/<page>\`. Use
-   \`akm show wiki:${name}/<page> toc\` for large pages.
-
-4. **Decide for each candidate.** For each related page:
-   - **Append**: add a section or paragraph under the relevant heading.
-     Include the raw source in the page's \`sources:\` frontmatter list.
-   - **Contradict**: note the tension explicitly; don't silently overwrite.
-     Follow the schema's contradiction policy.
-   - **Skip**: source doesn't add to this page — move on.
-
-5. **Create new pages for concepts/entities the source introduces.** Each
-   new page must have frontmatter with \`description\`, \`pageKind\`,
-   \`xrefs\`, and \`sources\`. Cross-reference with related pages both
-   directions.
-
-6. **Update xrefs both ways.** If page A now xrefs page B, page B must xref
-   page A. \`akm wiki lint ${name}\` will flag violations.
-
-7. **Append to \`log.md\`.** One entry per ingest: date, source slug, one-line
-   summary, refs to created/edited pages. Newest at the top.
-
-8. **Regenerate the index + verify.**
-   \`\`\`sh
-   akm index
-   akm wiki lint ${name}
-   \`\`\`
-   Resolve any lint findings before calling the ingest done.
-
-That's it. \`akm\` never calls an LLM — reasoning is your job; it just owns
-the invariants (raw immutability, unique slugs, ref validation, index
-regeneration, structural lint).
-`;
+    const workflow = ingestWorkflowTemplate
+        .replaceAll("{{WIKI_NAME}}", name)
+        .replaceAll("{{WIKI_DIR}}", wikiDir)
+        .replaceAll("{{SCHEMA_PATH}}", schemaPath);
     return { wiki: name, path: wikiDir, schemaPath, workflow };
 }

package/dist/workflows/authoring.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import fs from "node:fs";
 import path from "node:path";
 import { resolveAssetPathFromName } from "../core/asset-spec";
@@ -5,6 +8,7 @@ import { isWithin, resolveStashDir } from "../core/common";
 import { UsageError } from "../core/errors";
 import { warn } from "../core/warn";
 import { parseWorkflow } from "./parser";
+import workflowTemplate from "./workflow-template.md" with { type: "text" };
 const DEFAULT_WORKFLOW_TEMPLATE = renderWorkflowTemplate({
     title: "Example Workflow",
     firstStepTitle: "First Step",
@@ -134,29 +138,8 @@ export function validateWorkflowSource(target) {
     return { path: target, parse: parseWorkflow(content, { path: target }) };
 }
 function renderWorkflowTemplate(input) {
-    return `---
-description: Describe what this workflow accomplishes
-tags:
-  - example
-params:
-  example_param: Explain this parameter
----
-
-# Workflow: ${input.title}
-
-## Step: ${input.firstStepTitle}
-Step ID: ${input.firstStepId}
-
-### Instructions
-Describe what to do in this step.
-
-### Completion Criteria
-- Confirm the first step is complete
-
-## Step: Second Step
-Step ID: second-step
-
-### Instructions
-Describe what happens next.
-`;
+    return workflowTemplate
+        .replace("{{TITLE}}", input.title)
+        .replace("{{FIRST_STEP_TITLE}}", input.firstStepTitle)
+        .replace("{{FIRST_STEP_ID}}", input.firstStepId);
 }

package/dist/workflows/cli.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { UsageError } from "../core/errors";
 export const WORKFLOW_STEP_STATES = [
     "completed",

package/dist/workflows/db.js

@@ -1,7 +1,44 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { Database } from "bun:sqlite";
 import fs from "node:fs";
 import path from "node:path";
 import { getWorkflowDbPath } from "../core/paths";
+/**
+ * workflow.db — Durable SQLite database for workflow run state.
+ *
+ * Owns the `workflow_runs` and `workflow_run_steps` tables that track active /
+ * completed workflow executions. Like `state.db` (and unlike `index.db`), the
+ * rows here are NON-REGENERABLE — losing them is data loss. Schema must evolve
+ * via incremental, additive migrations recorded in `schema_migrations`.
+ *
+ * ## Migration-safety contract
+ *
+ * The `schema_migrations` table records every applied migration by a stable
+ * string ID. `runMigrations(db)` is idempotent: new installs run every
+ * migration in order; upgrades run only the ones not yet applied. The
+ * migration framework here intentionally mirrors `src/core/state-db.ts` so
+ * future schema evolution follows a single proven pattern.
+ *
+ * Permitted schema evolution operations (always migration-safe in SQLite):
+ *   - ALTER TABLE … ADD COLUMN <name> <type> DEFAULT <value>
+ *   - CREATE INDEX IF NOT EXISTS …
+ *   - CREATE TABLE IF NOT EXISTS … (additive new tables)
+ *
+ * ## Bootstrapping pre-versioning databases
+ *
+ * Workflow databases created before this file gained `schema_migrations`
+ * already have the `workflow_runs.scope_key` column applied by the previous
+ * ad-hoc `PRAGMA table_info` + `ALTER TABLE` code. To avoid re-running the
+ * migration (which would no-op but still wastes work and clutters logs), the
+ * runner detects this state and back-fills the `schema_migrations` row for
+ * the scope-key migration before evaluating the migration list. See
+ * `bootstrapPreVersioningDb()`.
+ *
+ * @module workflows/db
+ */
+// ── Public API ───────────────────────────────────────────────────────────────
 export function openWorkflowDatabase(dbPath = getWorkflowDbPath()) {
     const dir = path.dirname(dbPath);
     if (!fs.existsSync(dir)) {
@@ -10,18 +47,29 @@ export function openWorkflowDatabase(dbPath = getWorkflowDbPath()) {
     const db = new Database(dbPath);
     db.exec("PRAGMA journal_mode = WAL");
     db.exec("PRAGMA foreign_keys = ON");
-    ensureWorkflowSchema(db);
+    ensureBaseSchema(db);
+    runMigrations(db);
     return db;
 }
 export function closeWorkflowDatabase(db) {
     db.close();
 }
-function ensureWorkflowSchema(db) {
+// ── Base schema ──────────────────────────────────────────────────────────────
+/**
+ * Create the baseline `workflow_runs` and `workflow_run_steps` tables if they
+ * do not exist. These statements are idempotent: existing databases keep their
+ * current schema, and migrations evolve them further.
+ *
+ * NOTE: the `scope_key` column on `workflow_runs` is intentionally NOT declared
+ * here. It is added by migration `001-add-scope-key`. Fresh databases will run
+ * the migration immediately on first open; pre-versioning databases that
+ * already have the column are bootstrapped — see {@link runMigrations}.
+ */
+function ensureBaseSchema(db) {
     db.exec(`
     CREATE TABLE IF NOT EXISTS workflow_runs (
       id                TEXT PRIMARY KEY,
       workflow_ref      TEXT NOT NULL,
-      scope_key         TEXT,
       workflow_entry_id INTEGER,
       workflow_title    TEXT NOT NULL,
       status            TEXT NOT NULL CHECK (status IN ('active', 'completed', 'blocked', 'failed')),
@@ -53,12 +101,94 @@ function ensureWorkflowSchema(db) {
     CREATE INDEX IF NOT EXISTS idx_workflow_run_steps_run_sequence
       ON workflow_run_steps(run_id, sequence_index);
   `);
-    const columns = db
-        .query("PRAGMA table_info(workflow_runs)")
-        .all()
-        .map((column) => column.name);
-    if (!columns.includes("scope_key")) {
-        db.exec("ALTER TABLE workflow_runs ADD COLUMN scope_key TEXT");
+}
+/**
+ * All workflow.db migrations in application order. New migrations are
+ * APPENDED — never inserted in the middle or reordered.
+ */
+const MIGRATIONS = [
+    // ── Migration 001 — add scope_key column ────────────────────────────────────
+    //
+    // Adds the `scope_key` column to `workflow_runs` so runs can be partitioned
+    // per stash/scope. Pre-versioning databases that already have this column
+    // are bootstrapped before this migration runs — see runMigrations().
+    {
+        id: "001-add-scope-key",
+        up: `
+      ALTER TABLE workflow_runs ADD COLUMN scope_key TEXT;
+
+      CREATE INDEX IF NOT EXISTS idx_workflow_runs_scope_ref_status
+        ON workflow_runs(scope_key, workflow_ref, status);
+    `,
+    },
+];
+/**
+ * Stable id of the scope_key migration. Exported for bootstrap detection and
+ * tests.
+ */
+const SCOPE_KEY_MIGRATION_ID = "001-add-scope-key";
+/**
+ * Create the migrations table if it does not exist. Called unconditionally on
+ * every open so a fresh database bootstraps correctly.
+ */
+function ensureMigrationsTable(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      id         TEXT    PRIMARY KEY,
+      applied_at TEXT    NOT NULL DEFAULT (datetime('now'))
+    );
+  `);
+}
+/**
+ * Detect whether a column exists on a given table.
+ */
+function hasColumn(db, table, column) {
+    const rows = db.query(`PRAGMA table_info(${table})`).all();
+    return rows.some((r) => r.name === column);
+}
+/**
+ * Back-fill `schema_migrations` rows for any schema state that existed before
+ * this file gained migration tracking.
+ *
+ * The pre-versioning code added the `scope_key` column on `workflow_runs` via
+ * an ad-hoc PRAGMA / ALTER TABLE pair. Those databases must not re-run the
+ * scope_key migration (the ALTER would fail with "duplicate column name"
+ * since the migration body does not use IF NOT EXISTS — SQLite does not
+ * support that clause on ALTER TABLE ADD COLUMN). Instead, we mark the
+ * migration as already applied.
+ *
+ * This function is a no-op on fresh databases: the `scope_key` column does
+ * not exist, so the migration runs normally and records itself.
+ */
+function bootstrapPreVersioningDb(db) {
+    const alreadyRecorded = db.prepare("SELECT 1 FROM schema_migrations WHERE id = ?").get(SCOPE_KEY_MIGRATION_ID);
+    if (alreadyRecorded)
+        return;
+    if (hasColumn(db, "workflow_runs", "scope_key")) {
+        db.prepare("INSERT INTO schema_migrations (id) VALUES (?)").run(SCOPE_KEY_MIGRATION_ID);
+    }
+}
+/**
+ * Apply every pending migration in a single transaction per migration.
+ *
+ * Each migration is applied in its own transaction so a failure in migration N
+ * does not roll back already-applied migrations 1..N-1. The migration row is
+ * inserted AFTER the DDL succeeds — a crash mid-migration leaves no row and
+ * the migration is retried on next open.
+ *
+ * Called automatically by {@link openWorkflowDatabase}.
+ */
+export function runMigrations(db) {
+    ensureMigrationsTable(db);
+    bootstrapPreVersioningDb(db);
+    const appliedRows = db.prepare("SELECT id FROM schema_migrations").all();
+    const applied = new Set(appliedRows.map((r) => r.id));
+    for (const migration of MIGRATIONS) {
+        if (applied.has(migration.id))
+            continue;
+        db.transaction(() => {
+            db.exec(migration.up);
+            db.prepare("INSERT INTO schema_migrations (id) VALUES (?)").run(migration.id);
+        })();
     }
-    db.exec("CREATE INDEX IF NOT EXISTS idx_workflow_runs_scope_ref_status ON workflow_runs(scope_key, workflow_ref, status)");
 }

package/dist/workflows/document-cache.js

@@ -1,13 +1,6 @@
-/**
- * Side-channel cache that lets the workflow renderer hand a validated
- * `WorkflowDocument` to the indexer without persisting it through the
- * `entry_json` column or widening `StashEntry` with a workflow-shaped field.
- *
- * The renderer is called during metadata generation; the indexer writes the
- * document to `workflow_documents` after `upsertEntry` returns the row id.
- * A WeakMap keyed by the entry object preserves the parse work between the
- * two phases without leaking memory if the entry is dropped.
- */
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 const cache = new WeakMap();
 export function cacheWorkflowDocument(entry, doc) {
     cache.set(entry, doc);

package/dist/workflows/parser.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Workflow markdown → WorkflowDocument JSON.
  *

package/dist/workflows/renderer.js

@@ -1,3 +1,6 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 /**
  * Show + indexing renderer for workflow assets.
  *
@@ -8,6 +11,7 @@
  */
 import { makeAssetRef } from "../core/asset-ref";
 import { UsageError } from "../core/errors";
+import { registerMetadataContributor } from "../indexer/metadata-contributors";
 import { cacheWorkflowDocument } from "./document-cache";
 import { parseWorkflow } from "./parser";
 function shellQuote(value) {
@@ -54,8 +58,12 @@ export const workflowMdRenderer = {
             })),
         };
     },
-    extractMetadata(entry, ctx) {
-        const doc = loadDocument(ctx);
+};
+registerMetadataContributor({
+    name: "workflow-document-metadata",
+    appliesTo: ({ rendererName }) => rendererName === "workflow-md",
+    contribute(entry, { renderContext }) {
+        const doc = loadDocument(renderContext);
         const hints = new Set(entry.searchHints ?? []);
         hints.add(doc.title);
         for (const step of doc.steps) {
@@ -75,4 +83,4 @@ export const workflowMdRenderer = {
         }
         cacheWorkflowDocument(entry, doc);
     },
-};
+});