akm-cli 0.9.0-beta.5 → 0.9.0-beta.51

package/dist/tasks/runner.js

@@ -33,7 +33,7 @@ import { loadConfig } from "../core/config/config.js";
 import { NotFoundError, rethrowIfTestIsolationError } from "../core/errors.js";
 import { buildTaskRunId, insertTaskLogLines, openLogsDatabase, } from "../core/logs-db.js";
 import { getTaskLogDir } from "../core/paths.js";
-import { getTaskHistory, openStateDatabase, queryTaskHistory, upsertTaskHistory } from "../core/state-db.js";
+import { getTaskHistory, queryTaskHistory, upsertTaskHistory, withStateDb } from "../core/state-db.js";
 import { error } from "../core/warn.js";
 import { requireAgentProfile, runAgent } from "../integrations/agent/index.js";
 import { resolveProcessAgentProfile } from "../integrations/agent/config.js";
@@ -460,8 +460,7 @@ function persistRunLog(input) {
 // ── history ─────────────────────────────────────────────────────────────────
 function appendHistory(result) {
     try {
-        const db = openStateDatabase();
-        try {
+        withStateDb((db) => {
             upsertTaskHistory(db, {
                 task_id: result.id,
                 status: result.status,
@@ -477,10 +476,7 @@ function appendHistory(result) {
                     profile: result.target.kind === "prompt" ? result.target.profile : undefined,
                 }),
             });
-        }
-        finally {
-            db.close();
-        }
+        });
     }
     catch (err) {
         rethrowIfTestIsolationError(err);
@@ -488,8 +484,7 @@ function appendHistory(result) {
     }
 }
 export function readTaskHistory(options = {}) {
-    const db = openStateDatabase();
-    try {
+    return withStateDb((db) => {
         let rows;
         if (options.id) {
             const row = getTaskHistory(db, options.id);
@@ -503,10 +498,7 @@ export function readTaskHistory(options = {}) {
             return rows.slice(0, options.limit);
         }
         return rows;
-    }
-    finally {
-        db.close();
-    }
+    });
 }
 /**
  * Convert a `TaskHistoryRow` from state.db back to a `TaskRunResult` shape

package/dist/wiki/wiki.js

@@ -224,6 +224,43 @@ function readSchemaDescription(wikiDir) {
         return undefined;
     }
 }
+/**
+ * Load a wiki's `schema.md` body and frontmatter.
+ *
+ * Unlike {@link readSchemaDescription} (which returns only the frontmatter
+ * `description` for `listWikis` summaries), this returns the markdown **body**
+ * — everything after the closing `---` of the frontmatter — which is where the
+ * page contract, operations, and hard rules live. The body is the rulebook
+ * injected into the write-time prompt for wiki-page edits.
+ *
+ * Swallow-and-degrade like the existing reader: a missing file, an unresolvable
+ * wiki dir, or malformed content yields `{ body: "", frontmatter: {} }`. Never
+ * throws.
+ */
+export function loadWikiSchema(stashRoot, name) {
+    const empty = { body: "", frontmatter: {} };
+    let wikiDir;
+    try {
+        wikiDir = resolveWikiDir(stashRoot, name);
+    }
+    catch {
+        return empty;
+    }
+    let raw;
+    try {
+        raw = fs.readFileSync(path.join(wikiDir, SCHEMA_MD), "utf8");
+    }
+    catch {
+        return empty;
+    }
+    try {
+        const parsed = parseFrontmatter(raw);
+        return { body: parsed.content, frontmatter: parsed.data };
+    }
+    catch {
+        return empty;
+    }
+}
 function toIsoDate(ms) {
     return new Date(ms).toISOString();
 }

package/dist/workflows/db.js

@@ -6,6 +6,7 @@ import path from "node:path";
 import { getWorkflowDbPath } from "../core/paths.js";
 import { openDatabase } from "../storage/database.js";
 import { runMigrations as runSqliteMigrations } from "../storage/engines/sqlite-migrations.js";
+import { applyStandardPragmas } from "../storage/sqlite-pragmas.js";
 /**
  * workflow.db — Durable SQLite database for workflow run state.
  *
@@ -46,12 +47,10 @@ export function openWorkflowDatabase(dbPath = getWorkflowDbPath()) {
         fs.mkdirSync(dir, { recursive: true });
     }
     const db = openDatabase(dbPath);
-    db.exec("PRAGMA journal_mode = WAL");
     // #589: 30 s busy timeout, matching index.db / state.db. Without it the
     // default is 0 ms, so any concurrent writer fails immediately with
-    // SQLITE_BUSY.
-    db.exec("PRAGMA busy_timeout = 30000");
-    db.exec("PRAGMA foreign_keys = ON");
+    // SQLITE_BUSY. #628: journal_mode is configurable via AKM_SQLITE_JOURNAL_MODE.
+    applyStandardPragmas(db, { dataDir: dir });
     ensureBaseSchema(db);
     runMigrations(db);
     return db;

package/dist/workflows/runtime/runs.js

@@ -2,23 +2,16 @@
 // License, v. 2.0. If a copy of the MPL was not distributed with this
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { randomUUID } from "node:crypto";
-import fs from "node:fs";
 import { parseAssetRef } from "../../core/asset/asset-ref.js";
 import { loadConfig } from "../../core/config/config.js";
 import { NotFoundError, UsageError } from "../../core/errors.js";
 import { appendEvent } from "../../core/events.js";
-import { getDbPath } from "../../core/paths.js";
-import { closeDatabase, openExistingDatabase } from "../../indexer/db/db.js";
-import { resolveSourceEntries } from "../../indexer/search/search-source.js";
-import { resolveSourcesForOrigin } from "../../registry/origin-resolve.js";
-import { resolveAssetPath } from "../../sources/resolve.js";
 import { withWorkflowRunsRepo, } from "../../storage/repositories/workflow-runs-repository.js";
-import { formatWorkflowErrors } from "../authoring/authoring.js";
 import { getCurrentWorkflowScopeKey } from "../authoring/scope-key.js";
-import { parseWorkflow } from "../parser.js";
 import { validateStepSummary } from "../validate-summary.js";
 import { resolveAgentIdentity } from "./agent-identity.js";
 import { evaluateCheckin } from "./checkin.js";
+import { loadWorkflowAsset, resolveWorkflowEntryId } from "./workflow-asset-loader.js";
 export async function startWorkflowRun(ref, params = {}, options) {
     const asset = await loadWorkflowAsset(ref);
     return withWorkflowRunsRepo(async (repo) => {
@@ -299,115 +292,6 @@ async function resolveRunSpecifier(repo, specifier, params) {
     const started = await startWorkflowRun(ref, params ?? {});
     return { run: readWorkflowRun(repo, started.run.id), autoStarted: true };
 }
-async function loadWorkflowAsset(ref) {
-    const parsed = parseAssetRef(ref);
-    if (parsed.type !== "workflow") {
-        throw new UsageError(`Expected a workflow ref (workflow:<name>), got "${ref}".`);
-    }
-    const config = loadConfig();
-    const allSources = resolveSourceEntries(undefined, config);
-    const searchSources = resolveSourcesForOrigin(parsed.origin, allSources);
-    let assetPath;
-    let sourcePath;
-    for (const source of searchSources) {
-        try {
-            assetPath = await resolveAssetPath(source.path, "workflow", parsed.name);
-            sourcePath = source.path;
-            break;
-        }
-        catch {
-            /* continue */
-        }
-    }
-    if (!assetPath) {
-        throw new NotFoundError(`Workflow not found for ref: workflow:${parsed.name}`);
-    }
-    const resolvedSourcePath = sourcePath ?? config.stashDir ?? assetPath;
-    const fullRef = `${parsed.origin ? `${parsed.origin}//` : ""}workflow:${parsed.name}`;
-    const cached = readWorkflowDocumentFromIndex(resolvedSourcePath, fullRef);
-    const document = cached ?? loadWorkflowDocumentFromDisk(assetPath);
-    return projectAsset(document, fullRef, assetPath, resolvedSourcePath);
-}
-function loadWorkflowDocumentFromDisk(assetPath) {
-    const content = fs.readFileSync(assetPath, "utf8");
-    const result = parseWorkflow(content, { path: assetPath });
-    if (!result.ok) {
-        throw new UsageError(formatWorkflowErrors(assetPath, result.errors));
-    }
-    return result.document;
-}
-function readWorkflowDocumentFromIndex(sourcePath, ref) {
-    const dbPath = getDbPath();
-    if (!fs.existsSync(dbPath))
-        return null;
-    const db = openExistingDatabase(dbPath);
-    try {
-        const parsed = parseAssetRef(ref);
-        const entryKey = `${sourcePath}:${parsed.type}:${parsed.name}`;
-        const row = db
-            .prepare(`SELECT wd.document_json AS document_json
-           FROM workflow_documents wd
-           JOIN entries e ON e.id = wd.entry_id
-          WHERE e.entry_type = 'workflow' AND e.entry_key = ?
-          LIMIT 1`)
-            .get(entryKey);
-        if (!row)
-            return null;
-        try {
-            return JSON.parse(row.document_json);
-        }
-        catch {
-            return null;
-        }
-    }
-    finally {
-        closeDatabase(db);
-    }
-}
-function projectAsset(doc, ref, assetPath, sourcePath) {
-    return {
-        ref,
-        path: assetPath,
-        sourcePath,
-        title: doc.title,
-        ...(doc.parameters
-            ? {
-                parameters: doc.parameters.map((p) => ({
-                    name: p.name,
-                    ...(p.description ? { description: p.description } : {}),
-                })),
-            }
-            : {}),
-        steps: doc.steps.map((s) => ({
-            id: s.id,
-            title: s.title,
-            instructions: s.instructions.text,
-            ...(s.completionCriteria ? { completionCriteria: s.completionCriteria.map((c) => c.text) } : {}),
-            sequenceIndex: s.sequenceIndex,
-        })),
-    };
-}
-function resolveWorkflowEntryId(sourcePath, ref) {
-    const dbPath = getDbPath();
-    if (!fs.existsSync(dbPath))
-        return null;
-    const db = openExistingDatabase(dbPath);
-    try {
-        const parsed = parseAssetRef(ref);
-        const entryKey = `${sourcePath}:${parsed.type}:${parsed.name}`;
-        const row = db
-            .prepare(`SELECT id
-         FROM entries
-         WHERE entry_type = 'workflow'
-            AND entry_key = ?
-          LIMIT 1`)
-            .get(entryKey);
-        return row?.id ?? null;
-    }
-    finally {
-        closeDatabase(db);
-    }
-}
 function readWorkflowRun(repo, runId) {
     const run = repo.getRunById(runId);
     if (!run) {

package/dist/workflows/runtime/workflow-asset-loader.js

@@ -0,0 +1,125 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+import fs from "node:fs";
+import { parseAssetRef } from "../../core/asset/asset-ref.js";
+import { loadConfig } from "../../core/config/config.js";
+import { NotFoundError, UsageError } from "../../core/errors.js";
+import { getDbPath } from "../../core/paths.js";
+import { resolveSourceEntries } from "../../indexer/search/search-source.js";
+import { resolveSourcesForOrigin } from "../../registry/origin-resolve.js";
+import { resolveAssetPath } from "../../sources/resolve.js";
+import { withIndexDb } from "../../storage/repositories/index-db.js";
+import { formatWorkflowErrors } from "../authoring/authoring.js";
+import { parseWorkflow } from "../parser.js";
+/**
+ * Resolve a `workflow:<name>` ref to a fully-projected {@link WorkflowAsset}.
+ *
+ * Prefers the parsed document cached in `index.db` (fast path) and falls back to
+ * reading + parsing the source file from disk. Pure loading/parsing concern —
+ * extracted from the run repository so run orchestration no longer owns asset
+ * resolution.
+ */
+export async function loadWorkflowAsset(ref) {
+    const parsed = parseAssetRef(ref);
+    if (parsed.type !== "workflow") {
+        throw new UsageError(`Expected a workflow ref (workflow:<name>), got "${ref}".`);
+    }
+    const config = loadConfig();
+    const allSources = resolveSourceEntries(undefined, config);
+    const searchSources = resolveSourcesForOrigin(parsed.origin, allSources);
+    let assetPath;
+    let sourcePath;
+    for (const source of searchSources) {
+        try {
+            assetPath = await resolveAssetPath(source.path, "workflow", parsed.name);
+            sourcePath = source.path;
+            break;
+        }
+        catch {
+            /* continue */
+        }
+    }
+    if (!assetPath) {
+        throw new NotFoundError(`Workflow not found for ref: workflow:${parsed.name}`);
+    }
+    const resolvedSourcePath = sourcePath ?? config.stashDir ?? assetPath;
+    const fullRef = `${parsed.origin ? `${parsed.origin}//` : ""}workflow:${parsed.name}`;
+    const cached = readWorkflowDocumentFromIndex(resolvedSourcePath, fullRef);
+    const document = cached ?? loadWorkflowDocumentFromDisk(assetPath);
+    return projectAsset(document, fullRef, assetPath, resolvedSourcePath);
+}
+/**
+ * Resolve the `entries.id` for an indexed workflow, or null when the index
+ * database does not yet exist or has no matching entry.
+ */
+export function resolveWorkflowEntryId(sourcePath, ref) {
+    if (!fs.existsSync(getDbPath()))
+        return null;
+    const parsed = parseAssetRef(ref);
+    const entryKey = `${sourcePath}:${parsed.type}:${parsed.name}`;
+    return withIndexDb((db) => {
+        const row = db
+            .prepare(`SELECT id
+         FROM entries
+         WHERE entry_type = 'workflow'
+            AND entry_key = ?
+          LIMIT 1`)
+            .get(entryKey);
+        return row?.id ?? null;
+    });
+}
+function loadWorkflowDocumentFromDisk(assetPath) {
+    const content = fs.readFileSync(assetPath, "utf8");
+    const result = parseWorkflow(content, { path: assetPath });
+    if (!result.ok) {
+        throw new UsageError(formatWorkflowErrors(assetPath, result.errors));
+    }
+    return result.document;
+}
+function readWorkflowDocumentFromIndex(sourcePath, ref) {
+    if (!fs.existsSync(getDbPath()))
+        return null;
+    const parsed = parseAssetRef(ref);
+    const entryKey = `${sourcePath}:${parsed.type}:${parsed.name}`;
+    return withIndexDb((db) => {
+        const row = db
+            .prepare(`SELECT wd.document_json AS document_json
+           FROM workflow_documents wd
+           JOIN entries e ON e.id = wd.entry_id
+          WHERE e.entry_type = 'workflow' AND e.entry_key = ?
+          LIMIT 1`)
+            .get(entryKey);
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(row.document_json);
+        }
+        catch {
+            return null;
+        }
+    });
+}
+function projectAsset(doc, ref, assetPath, sourcePath) {
+    return {
+        ref,
+        path: assetPath,
+        sourcePath,
+        title: doc.title,
+        ...(doc.parameters
+            ? {
+                parameters: doc.parameters.map((p) => ({
+                    name: p.name,
+                    ...(p.description ? { description: p.description } : {}),
+                })),
+            }
+            : {}),
+        steps: doc.steps.map((s) => ({
+            id: s.id,
+            title: s.title,
+            instructions: s.instructions.text,
+            ...(s.completionCriteria ? { completionCriteria: s.completionCriteria.map((c) => c.text) } : {}),
+            sequenceIndex: s.sequenceIndex,
+        })),
+    };
+}

package/dist/workflows/validate-summary.js

@@ -16,14 +16,9 @@
  *
  * @module workflows/validate-summary
  */
+import validateSummaryJudgePrompt from "../assets/prompts/validate-summary-judge.md" with { type: "text" };
 import { parseJsonResponse } from "../core/parse.js";
-const JUDGE_SYSTEM = "You are a strict completion auditor for a software workflow engine. " +
-    "Given a step's completion criteria and a summary of the work an agent claims to have done, " +
-    "judge whether the summary provides concrete evidence that EVERY criterion is satisfied. " +
-    "Be skeptical: vague, hand-wavy, or unsubstantiated claims do NOT satisfy a criterion. " +
-    'Respond with ONLY a JSON object: {"complete": boolean, "missing": string[], "feedback": string}. ' +
-    '"missing" lists the exact criteria that are not yet satisfied; "feedback" is a short directive ' +
-    "telling the agent what to finish or fix. No prose, no markdown fences.";
+const JUDGE_SYSTEM = validateSummaryJudgePrompt;
 function buildUserPrompt(input) {
     const criteria = input.completionCriteria.map((c, i) => `${i + 1}. ${c}`).join("\n");
     return [

package/docs/data-and-telemetry.md

@@ -63,7 +63,7 @@ Override: set `AKM_CACHE_DIR` or `XDG_CACHE_HOME`.
 
 | Path | Contents | Safe to delete? |
 |---|---|---|
-| `<stash>/` | All your asset files: agents, skills, commands, knowledge, workflows, memories, vaults, wikis, lessons | **No** — this is YOUR data |
+| `<stash>/` | All your asset files: agents, skills, commands, knowledge, workflows, memories, env files, secrets, wikis, lessons, facts | **No** — this is YOUR data |
 | `<stash>/.akm/` | Hidden AKM metadata (v0.7 proposals, legacy runs) | Caution — check for pending proposals first |
 
 Override: set `AKM_STASH_DIR` (or configure `stashDir` in `config.json`).
@@ -130,7 +130,7 @@ An append-only log of every mutating action you perform with AKM. Events are sto
 
 ### 2. Proposals Table
 
-The proposal queue: pending, accepted, and rejected improvement proposals for your stash assets. Generated by `akm reflect` and the improve loop.
+The proposal queue: pending, accepted, and rejected improvement proposals for your stash assets. Generated by `akm improve`, `akm propose`, and related proposal-producing flows.
 
 Contents:
 - Proposal UUID (primary key)
@@ -216,6 +216,7 @@ You can redirect any AKM directory to a custom path:
 |---|---|
 | `AKM_CONFIG_DIR` | Config directory (`~/.config/akm/`) |
 | `AKM_DATA_DIR` | Data directory (`~/.local/share/akm/`) |
+| `AKM_SQLITE_JOURNAL_MODE` | SQLite journal mode: `WAL` (default), `DELETE`, or `TRUNCATE`. Use `DELETE`/`TRUNCATE` on network filesystems (NFS/SMB) where WAL is impossible. When left at the `WAL` default, akm auto-detects a network FS for the data dir and falls back to `DELETE`. |
 | `AKM_STATE_DIR` | State directory (`~/.local/state/akm/`) |
 | `AKM_CACHE_DIR` | Cache directory (`~/.cache/akm/`) |
 | `AKM_STASH_DIR` | Default stash directory (`~/akm/`) |

package/docs/migration/release-notes/0.9.0.md

@@ -0,0 +1,39 @@
+Migration notes for akm v0.9.0
+
+This is the final 0.9.0 cut. If you were already running a 0.9.0 beta, the
+main upgrade work is to align scripts, prompts, and stash layout with the
+released command surface.
+
+Key operator-facing changes:
+
+- Node.js is supported again for the published CLI. Install with Bun, Node.js
+  >= 20.12, or the prebuilt binary.
+- The legacy `vault` asset type and `akm vault ...` command family are gone.
+  Use `env:` for whole `.env` groups and `secret:` for a single sensitive
+  value.
+- `akm-migrate-storage` still ships and still performs the non-destructive
+  `vaults/` -> `env/` copy for older stashes. Run it before indexing if you are
+  upgrading from a stash that still stores `.env` files only under `vaults/`.
+- Proposal workflow is fully consolidated around `akm improve`, `akm propose`,
+  and `akm proposal ...`. Update any old `akm reflect`, `akm distill`,
+  `akm accept`, `akm reject`, or `akm proposals` usage.
+
+Primary public command family for 0.9.0:
+
+- `akm improve <ref> [--task "..."]`
+- `akm propose <type> <name> (--task "..." | --file <path>)`
+- `akm proposal list`
+- `akm proposal show <id>`
+- `akm proposal diff <id>`
+- `akm proposal accept <id>`
+- `akm proposal reject <id> --reason "..."`
+
+Recommended post-upgrade checks:
+
+- Run `akm help migrate 0.9.0` on every machine where the CLI is installed.
+- Run `akm-migrate-storage --yes` once if the stash ever used `vaults/`.
+- Rebuild the index with `akm index`.
+- Review agent instructions and docs for old `vault`, `reflect`, and `distill`
+  examples.
+
+Full changelog: https://github.com/itlackey/akm/blob/main/CHANGELOG.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akm-cli",
-  "version": "0.9.0-beta.5",
+  "version": "0.9.0-beta.51",
   "type": "module",
   "description": "akm (Agent Knowledge Management) — A package manager for AI agent skills, commands, tools, and knowledge. Works with Claude Code, OpenCode, Cursor, and any AI coding assistant.",
   "keywords": [
@@ -46,28 +46,30 @@
     "docs/data-and-telemetry.md"
   ],
   "bin": {
-    "akm": "dist/cli.js",
-    "akm-migrate-storage": "dist/scripts/migrate-storage.js"
+    "akm": "dist/akm",
+    "akm-migrate-storage": "dist/akm-migrate-storage"
   },
   "scripts": {
-    "preinstall": "node -e \"var ua=process.env.npm_config_user_agent||'';var major=parseInt((process.versions.node||'0').split('.')[0],10);if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL||major>=20){process.exit(0)}console.error('\\n  ERROR: akm-cli requires the Bun runtime (https://bun.sh), Node.js >= 20, or the prebuilt binary.\\n  Install options:\\n    1. Bun:    curl -fsSL https://bun.sh/install | bash  &&  bun install -g akm-cli\\n    2. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n');process.exit(1)\"",
-    "build": "rm -rf dist && bun run tsc --project ./tsconfig.build.json && bun scripts/copy-assets.ts && bun scripts/fix-esm-extensions.ts",
+    "preinstall": "node -e \"var ua=process.env.npm_config_user_agent||'';var v=(process.versions.node||'0').split('.').map(function(n){return parseInt(n,10)||0});var ok=v[0]>20||(v[0]===20&&(v[1]>12||(v[1]===12&&v[2]>=0)));if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL||ok){process.exit(0)}console.error('\\n  ERROR: akm-cli requires the Bun runtime (https://bun.sh), Node.js >= 20.12, or the prebuilt binary.\\n  Install options:\\n    1. Bun:    curl -fsSL https://bun.sh/install | bash  &&  bun install -g akm-cli\\n    2. Node:   upgrade to Node.js 20.12 or newer (https://nodejs.org)\\n    3. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n');process.exit(1)\"",
+    "build": "rm -rf dist && bun scripts/gen-config-schema.ts &&bun run tsc --project ./tsconfig.build.json && bun scripts/copy-assets.ts && bun scripts/fix-esm-extensions.ts",
     "check": "bun run lint && bunx tsc --noEmit && bun run test:unit && bun run test:integration",
     "check:fast": "bun run lint && bunx tsc --noEmit && bun run test:unit",
     "check:changed": "bun test tests/output-baseline.test.ts tests/integration/e2e.test.ts tests/stash-search.test.ts && bun run lint && bunx tsc --noEmit",
-    "test": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests --path-ignore-patterns=tests/integration",
-    "test:unit": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests --path-ignore-patterns=tests/integration",
-    "test:integration": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests/integration ./tests/commands ./tests/workflows",
+    "sweep:tmp": "bun scripts/sweep-test-tmp.ts",
+    "test": "bash scripts/test-unit.sh",
+    "test:unit": "bash scripts/test-unit.sh",
+    "test:integration": "bun run sweep:tmp && bun test --isolate --timeout=30000 ./tests/integration ./tests/commands ./tests/workflows",
+    "test:unit:shard": "bun run sweep:tmp && bun test --isolate --timeout=30000 ./tests --path-ignore-patterns=tests/integration --shard=${SHARD:?set SHARD=k/N}",
+    "test:integration:shard": "bun run sweep:tmp && bun test --isolate --timeout=30000 ./tests/integration ./tests/commands ./tests/workflows --shard=${SHARD:?set SHARD=k/N}",
     "test:node-smoke": "bun scripts/node-smoke.ts",
     "test:node-compat": "AKM_NODE_COMPAT_TESTS=1 bun test --timeout=120000 tests/integration/node-compat.test.ts",
-    "test:sharded": "bun test ./tests --shard=1/4 & bun test ./tests --shard=2/4 & bun test ./tests --shard=3/4 & bun test ./tests --shard=4/4 & wait",
     "test:time": "bun scripts/test-timing-report.ts",
     "lint:isolation": "bun scripts/lint-tests-isolation.ts",
     "lint:devto-posts": "bun scripts/lint-devto-posts.ts",
     "lint:devto-posts:fix": "bun scripts/lint-devto-posts.ts --fix",
     "publish:devto": "npx -y @sinedied/devto-cli push \"docs/posts/**/*.md\" --token \"$DEVTO_TOKEN\" --repo \"$GITHUB_REPOSITORY\" --branch \"${GITHUB_REF_NAME:-main}\" --reconcile",
     "release:check": "./tests/release-check.sh",
-    "lint": "bunx biome check src/ tests/ && bun scripts/lint-tests-isolation.ts && bun scripts/lint-license-headers.ts && bun scripts/lint-runtime-boundary.ts",
+    "lint": "bunx biome check src/ tests/ && bun scripts/lint-tests-isolation.ts && bun scripts/lint-license-headers.ts && bun scripts/lint-runtime-boundary.ts && bun scripts/lint-repository-sql.ts && bun scripts/gen-config-schema.ts --check",
     "lint:runtime-boundary": "bun scripts/lint-runtime-boundary.ts",
     "lint:tests-isolation": "bun scripts/lint-tests-isolation.ts",
     "lint:fix": "bunx biome check --write src/ tests/",
@@ -93,7 +95,7 @@
   },
   "engines": {
     "bun": ">=1.0.0",
-    "node": ">=20.0.0"
+    "node": ">=20.12.0"
   },
   "dependencies": {
     "@clack/prompts": "^1.3.0",

package/dist/commands/db-cli.js

@@ -1,23 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * CLI command surface for `akm db ...`.
- *
- * MVP scope: only `akm db backups` is exposed. It lists the pre-upgrade
- * snapshots written by `backupDataDir()` under `<dataDir>/backups/`.
- *
- * Restoration is intentionally NOT a CLI subcommand for MVP — operators are
- * expected to stop akm and use `scripts/migrations/restore-data-dir.sh` (or a
- * plain `mv`/`cp`) to recover. Keeping the surface narrow lets us evolve the
- * backup format under the hood without locking in an API.
- */
-import { getDataDir } from "../core/paths.js";
-import { listBackups } from "../indexer/db/db-backup.js";
-export function akmDbBackups() {
-    const dataDir = getDataDir();
-    return {
-        dataDir,
-        backups: listBackups(dataDir),
-    };
-}