akm-cli 0.9.0-beta.53 → 0.9.0-beta.55

package/dist/commands/registry-cli.js

@@ -3,27 +3,24 @@
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { defineCommand } from "citty";
 import { parsePositiveIntFlag } from "../cli/parse-args.js";
-import { output, runWithJsonErrors } from "../cli/shared.js";
+import { defineJsonCommand, output } from "../cli/shared.js";
 import { DEFAULT_CONFIG, loadUserConfig, saveConfig } from "../core/config/config.js";
 import { UsageError } from "../core/errors.js";
 import { warn } from "../core/warn.js";
-import { getHyphenatedArg, getHyphenatedBoolean } from "../output/context.js";
 import { buildRegistryIndex, writeRegistryIndex } from "../registry/build-index.js";
 import { searchRegistry } from "./read/registry-search.js";
 export const registryCommand = defineCommand({
     meta: { name: "registry", description: "Manage stash registries" },
     subCommands: {
-        list: defineCommand({
+        list: defineJsonCommand({
             meta: { name: "list", description: "List configured registries" },
-            run() {
-                return runWithJsonErrors(() => {
-                    const config = loadUserConfig();
-                    const registries = config.registries ?? DEFAULT_CONFIG.registries;
-                    output("registry-list", { registries });
-                });
+            async run() {
+                const config = loadUserConfig();
+                const registries = config.registries ?? DEFAULT_CONFIG.registries;
+                output("registry-list", { registries });
             },
         }),
-        add: defineCommand({
+        add: defineJsonCommand({
             meta: { name: "add", description: "Add a registry by URL" },
             args: {
                 url: { type: "positional", description: "Registry index URL", required: true },
@@ -36,75 +33,71 @@ export const registryCommand = defineCommand({
                     default: false,
                 },
             },
-            run({ args }) {
-                return runWithJsonErrors(() => {
-                    if (!args.url.startsWith("http")) {
-                        throw new UsageError("Registry URL must start with http:// or https://");
-                    }
-                    if (args.url.startsWith("http://")) {
-                        const allowInsecure = getHyphenatedBoolean(args, "allow-insecure");
-                        if (!allowInsecure) {
-                            throw new UsageError("Registry URL uses plain HTTP (not HTTPS). An on-path attacker could substitute a malicious index. " +
-                                "Use https:// or pass --allow-insecure if you have explicitly accepted the risk.");
-                        }
-                        warn("Warning: registry URL uses plain HTTP (not HTTPS). --allow-insecure was set; an on-path attacker could substitute a malicious index.");
+            async run({ args }) {
+                if (!args.url.startsWith("http")) {
+                    throw new UsageError("Registry URL must start with http:// or https://");
+                }
+                if (args.url.startsWith("http://")) {
+                    const allowInsecure = args["allow-insecure"];
+                    if (!allowInsecure) {
+                        throw new UsageError("Registry URL uses plain HTTP (not HTTPS). An on-path attacker could substitute a malicious index. " +
+                            "Use https:// or pass --allow-insecure if you have explicitly accepted the risk.");
                     }
-                    const config = loadUserConfig();
-                    const registries = [...(config.registries ?? [])];
-                    // Deduplicate by URL
-                    if (registries.some((r) => r.url === args.url)) {
-                        output("registry-add", { registries, added: false, message: "Registry URL already configured" });
-                        return;
+                    warn("Warning: registry URL uses plain HTTP (not HTTPS). --allow-insecure was set; an on-path attacker could substitute a malicious index.");
+                }
+                const config = loadUserConfig();
+                const registries = [...(config.registries ?? [])];
+                // Deduplicate by URL
+                if (registries.some((r) => r.url === args.url)) {
+                    output("registry-add", { registries, added: false, message: "Registry URL already configured" });
+                    return;
+                }
+                const entry = { url: args.url };
+                if (args.name)
+                    entry.name = args.name;
+                if (args.provider)
+                    entry.provider = args.provider;
+                if (args.options) {
+                    try {
+                        entry.options = JSON.parse(args.options);
                     }
-                    const entry = { url: args.url };
-                    if (args.name)
-                        entry.name = args.name;
-                    if (args.provider)
-                        entry.provider = args.provider;
-                    if (args.options) {
-                        try {
-                            entry.options = JSON.parse(args.options);
-                        }
-                        catch {
-                            throw new UsageError("--options must be valid JSON");
-                        }
+                    catch {
+                        throw new UsageError("--options must be valid JSON");
                     }
-                    registries.push(entry);
-                    saveConfig({ ...config, registries });
-                    output("registry-add", { registries, added: true });
-                });
+                }
+                registries.push(entry);
+                saveConfig({ ...config, registries });
+                output("registry-add", { registries, added: true });
             },
         }),
-        remove: defineCommand({
+        remove: defineJsonCommand({
             meta: { name: "remove", description: "Remove a registry by URL or name" },
             args: {
                 target: { type: "positional", description: "Registry URL or name to remove", required: true },
                 yes: { type: "boolean", alias: "y", description: "Skip confirmation prompt", default: false },
             },
-            run({ args }) {
-                return runWithJsonErrors(async () => {
-                    const config = loadUserConfig();
-                    const registries = [...(config.registries ?? [])];
-                    const idx = registries.findIndex((r) => r.url === args.target || r.name === args.target);
-                    if (idx === -1) {
-                        output("registry-remove", { registries, removed: false, message: "No matching registry found" });
-                        return;
-                    }
-                    const { confirmDestructive } = await import("../cli/confirm.js");
-                    const confirmed = await confirmDestructive(`Remove registry "${args.target}"? This cannot be undone.`, {
-                        yes: args.yes === true,
-                    });
-                    if (!confirmed) {
-                        process.stderr.write("Aborted.\n");
-                        return;
-                    }
-                    const removed = registries.splice(idx, 1)[0];
-                    saveConfig({ ...config, registries });
-                    output("registry-remove", { registries, removed: true, entry: removed });
+            async run({ args }) {
+                const config = loadUserConfig();
+                const registries = [...(config.registries ?? [])];
+                const idx = registries.findIndex((r) => r.url === args.target || r.name === args.target);
+                if (idx === -1) {
+                    output("registry-remove", { registries, removed: false, message: "No matching registry found" });
+                    return;
+                }
+                const { confirmDestructive } = await import("../cli/confirm.js");
+                const confirmed = await confirmDestructive(`Remove registry "${args.target}"? This cannot be undone.`, {
+                    yes: args.yes === true,
                 });
+                if (!confirmed) {
+                    process.stderr.write("Aborted.\n");
+                    return;
+                }
+                const removed = registries.splice(idx, 1)[0];
+                saveConfig({ ...config, registries });
+                output("registry-remove", { registries, removed: true, entry: removed });
             },
         }),
-        search: defineCommand({
+        search: defineJsonCommand({
             meta: { name: "search", description: "Search enabled registries for stashes" },
             args: {
                 query: { type: "positional", description: "Search query", required: true },
@@ -112,14 +105,12 @@ export const registryCommand = defineCommand({
                 assets: { type: "boolean", description: "Include asset-level search results", default: false },
             },
             async run({ args }) {
-                await runWithJsonErrors(async () => {
-                    const limitRaw = parsePositiveIntFlag(args.limit ?? undefined);
-                    const result = await searchRegistry(args.query, { limit: limitRaw, includeAssets: args.assets });
-                    output("registry-search", result);
-                });
+                const limitRaw = parsePositiveIntFlag(args.limit ?? undefined);
+                const result = await searchRegistry(args.query, { limit: limitRaw, includeAssets: args.assets });
+                output("registry-search", result);
             },
         }),
-        "build-index": defineCommand({
+        "build-index": defineJsonCommand({
             meta: { name: "build-index", description: "Build a v2 registry index from discovery and manual entries" },
             args: {
                 out: { type: "string", description: "Output path for the generated index" },
@@ -128,21 +119,19 @@ export const registryCommand = defineCommand({
                 "github-api": { type: "string", description: "Override GitHub API base URL" },
             },
             async run({ args }) {
-                await runWithJsonErrors(async () => {
-                    const result = await buildRegistryIndex({
-                        manualEntriesPath: args.manual,
-                        npmRegistryBase: getHyphenatedArg(args, "npm-registry"),
-                        githubApiBase: getHyphenatedArg(args, "github-api"),
-                    });
-                    const outPath = writeRegistryIndex(result.index, args.out);
-                    output("registry-build-index", {
-                        outPath,
-                        version: result.index.version,
-                        updatedAt: result.index.updatedAt,
-                        totalKits: result.counts.total,
-                        counts: result.counts,
-                        manualEntriesPath: result.paths.manualEntriesPath,
-                    });
+                const result = await buildRegistryIndex({
+                    manualEntriesPath: args.manual,
+                    npmRegistryBase: args["npm-registry"],
+                    githubApiBase: args["github-api"],
+                });
+                const outPath = writeRegistryIndex(result.index, args.out);
+                output("registry-build-index", {
+                    outPath,
+                    version: result.index.version,
+                    updatedAt: result.index.updatedAt,
+                    totalKits: result.counts.total,
+                    counts: result.counts,
+                    manualEntriesPath: result.paths.manualEntriesPath,
                 });
             },
         }),

package/dist/commands/sources/add-cli.js

@@ -3,13 +3,11 @@
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import fs from "node:fs";
 import path from "node:path";
-import * as p from "@clack/prompts";
-import { defineCommand } from "citty";
-import { output, runWithJsonErrors } from "../../cli/shared.js";
+import * as p from "../../cli/clack.js";
+import { defineJsonCommand, output } from "../../cli/shared.js";
 import { UsageError } from "../../core/errors.js";
 import { appendEvent } from "../../core/events.js";
 import { warn } from "../../core/warn.js";
-import { getHyphenatedBoolean } from "../../output/context.js";
 import { akmRemove } from "./installed-stashes.js";
 import { akmAdd } from "./source-add.js";
 import { addStash } from "./source-manage.js";
@@ -149,7 +147,7 @@ export async function auditInstalledStashForDangerousKeys(opts) {
     return { blocked: true, exitCode: 1 };
 }
 // ── Command definition ────────────────────────────────────────────────────────
-export const addCommand = defineCommand({
+export const addCommand = defineJsonCommand({
     meta: {
         name: "add",
         description: "Add a source (local directory, website, npm package, GitHub repo, git URL, or remote provider)",
@@ -181,48 +179,11 @@ export const addCommand = defineCommand({
         },
     },
     async run({ args }) {
-        await runWithJsonErrors(async () => {
-            const ref = args.ref.trim();
-            const allowInsecure = getHyphenatedBoolean(args, "allow-insecure");
-            const allowDangerousKeys = allowInsecure;
-            // URL with --provider → stash source (remote or git provider)
-            if (args.provider) {
-                if (shouldWarnOnPlainHttp(ref)) {
-                    if (!allowInsecure) {
-                        throw new UsageError("Source URL uses plain HTTP (not HTTPS). An on-path attacker could substitute a malicious payload. " +
-                            "Use https:// or pass --allow-insecure if you have explicitly accepted the risk.", "INVALID_FLAG_VALUE", "Re-run with `--allow-insecure` only after confirming the URL is trusted.");
-                    }
-                    warn("Warning: source URL uses plain HTTP (not HTTPS). --allow-insecure was set; an on-path attacker could substitute a malicious payload.");
-                }
-                let parsedOptions;
-                if (args.options) {
-                    try {
-                        const parsed = JSON.parse(args.options);
-                        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-                            throw new UsageError("--options must be a JSON object");
-                        }
-                        parsedOptions = parsed;
-                    }
-                    catch (err) {
-                        if (err instanceof UsageError)
-                            throw err;
-                        throw new UsageError("--options must be valid JSON");
-                    }
-                }
-                const result = addStash({
-                    target: ref,
-                    name: args.name,
-                    providerType: args.provider,
-                    options: parsedOptions,
-                    writable: args.writable,
-                });
-                appendEvent({
-                    eventType: "add",
-                    metadata: { target: ref, provider: args.provider, name: args.name ?? null, writable: args.writable === true },
-                });
-                output("add", result);
-                return;
-            }
+        const ref = args.ref.trim();
+        const allowInsecure = args["allow-insecure"];
+        const allowDangerousKeys = allowInsecure;
+        // URL with --provider → stash source (remote or git provider)
+        if (args.provider) {
             if (shouldWarnOnPlainHttp(ref)) {
                 if (!allowInsecure) {
                     throw new UsageError("Source URL uses plain HTTP (not HTTPS). An on-path attacker could substitute a malicious payload. " +
@@ -230,64 +191,99 @@ export const addCommand = defineCommand({
                 }
                 warn("Warning: source URL uses plain HTTP (not HTTPS). --allow-insecure was set; an on-path attacker could substitute a malicious payload.");
             }
-            const websiteOptions = buildWebsiteOptions(args);
-            if (args.type === "wiki") {
-                const { registerWikiSource } = await import("./source-add.js");
-                const result = await registerWikiSource({
-                    ref,
-                    name: args.name,
-                    options: Object.keys(websiteOptions).length > 0 ? websiteOptions : undefined,
-                    writable: args.writable,
-                });
-                appendEvent({
-                    eventType: "add",
-                    metadata: { target: ref, type: "wiki", name: args.name ?? null, writable: args.writable === true },
-                });
-                output("add", result);
-                return;
+            let parsedOptions;
+            if (args.options) {
+                try {
+                    const parsed = JSON.parse(args.options);
+                    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+                        throw new UsageError("--options must be a JSON object");
+                    }
+                    parsedOptions = parsed;
+                }
+                catch (err) {
+                    if (err instanceof UsageError)
+                        throw err;
+                    throw new UsageError("--options must be valid JSON");
+                }
             }
-            const result = await akmAdd({
+            const result = addStash({
+                target: ref,
+                name: args.name,
+                providerType: args.provider,
+                options: parsedOptions,
+                writable: args.writable,
+            });
+            appendEvent({
+                eventType: "add",
+                metadata: { target: ref, provider: args.provider, name: args.name ?? null, writable: args.writable === true },
+            });
+            output("add", result);
+            return;
+        }
+        if (shouldWarnOnPlainHttp(ref)) {
+            if (!allowInsecure) {
+                throw new UsageError("Source URL uses plain HTTP (not HTTPS). An on-path attacker could substitute a malicious payload. " +
+                    "Use https:// or pass --allow-insecure if you have explicitly accepted the risk.", "INVALID_FLAG_VALUE", "Re-run with `--allow-insecure` only after confirming the URL is trusted.");
+            }
+            warn("Warning: source URL uses plain HTTP (not HTTPS). --allow-insecure was set; an on-path attacker could substitute a malicious payload.");
+        }
+        const websiteOptions = buildWebsiteOptions(args);
+        if (args.type === "wiki") {
+            const { registerWikiSource } = await import("./source-add.js");
+            const result = await registerWikiSource({
                 ref,
                 name: args.name,
-                overrideType: args.type,
                 options: Object.keys(websiteOptions).length > 0 ? websiteOptions : undefined,
                 writable: args.writable,
             });
             appendEvent({
                 eventType: "add",
-                metadata: {
-                    target: ref,
-                    name: args.name ?? null,
-                    overrideType: args.type ?? null,
-                    writable: args.writable === true,
-                },
+                metadata: { target: ref, type: "wiki", name: args.name ?? null, writable: args.writable === true },
             });
-            // ── Post-install env key audit ──────────────────────────────────────────
-            // Resolve the stash root from the install result and scan any env files
-            // for dangerous env var keys.  When findings are present the install is
-            // gated: TTY → interactive confirmation prompt; non-TTY without
-            // --allow-insecure → hard failure (exit 1).  Pass
-            // --allow-insecure to skip the prompt non-interactively.
-            const installedStashRoot = result.installed?.stashRoot ??
-                (result.sourceAdded && "stashRoot" in result.sourceAdded ? result.sourceAdded.stashRoot : undefined);
-            if (installedStashRoot) {
-                // Use the canonical installed id (most reliably resolved by akmRemove) rather
-                // than the raw user-supplied ref which may not match after URL normalisation.
-                const rollbackTarget = result.installed?.id ?? result.sourceAdded?.stashRoot ?? ref;
-                // The audit RETURNS its decision; we decide `process.exit` here, OUTSIDE
-                // any catch, so the abort cannot be lost to a swallowed exception (C3).
-                const decision = await auditInstalledStashForDangerousKeys({
-                    installedStashRoot,
-                    ref,
-                    allowDangerousKeys,
-                    rollbackTarget,
-                    isTTY: process.stdin.isTTY === true,
-                });
-                if (decision.blocked) {
-                    process.exit(decision.exitCode);
-                }
-            }
             output("add", result);
+            return;
+        }
+        const result = await akmAdd({
+            ref,
+            name: args.name,
+            overrideType: args.type,
+            options: Object.keys(websiteOptions).length > 0 ? websiteOptions : undefined,
+            writable: args.writable,
+        });
+        appendEvent({
+            eventType: "add",
+            metadata: {
+                target: ref,
+                name: args.name ?? null,
+                overrideType: args.type ?? null,
+                writable: args.writable === true,
+            },
         });
+        // ── Post-install env key audit ──────────────────────────────────────────
+        // Resolve the stash root from the install result and scan any env files
+        // for dangerous env var keys.  When findings are present the install is
+        // gated: TTY → interactive confirmation prompt; non-TTY without
+        // --allow-insecure → hard failure (exit 1).  Pass
+        // --allow-insecure to skip the prompt non-interactively.
+        const installedStashRoot = result.installed?.stashRoot ??
+            (result.sourceAdded && "stashRoot" in result.sourceAdded ? result.sourceAdded.stashRoot : undefined);
+        if (installedStashRoot) {
+            // Use the canonical installed id (most reliably resolved by akmRemove) rather
+            // than the raw user-supplied ref which may not match after URL normalisation.
+            const rollbackTarget = result.installed?.id ?? result.sourceAdded?.stashRoot ?? ref;
+            // The audit RETURNS its decision; we decide `process.exit` here, OUTSIDE
+            // any catch, so the abort cannot be lost to a swallowed exception (C3).
+            const decision = await auditInstalledStashForDangerousKeys({
+                installedStashRoot,
+                ref,
+                allowDangerousKeys,
+                rollbackTarget,
+                isTTY: process.stdin.isTTY === true,
+            });
+            if (decision.blocked) {
+                process.exit(decision.exitCode);
+            }
+        }
+        output("add", result);
     },
 });

package/dist/commands/sources/history.js

@@ -22,7 +22,7 @@ import { readEvents } from "../../core/events.js";
 import { isoToSqlite, parseSinceToIso } from "../../core/time.js";
 import { closeDatabase, openExistingDatabase } from "../../indexer/db/db.js";
 import { getUsageEvents } from "../../indexer/usage/usage-events.js";
-import { listProposals } from "../proposal/validators/proposals.js";
+import { listProposals } from "../proposal/repository.js";
 // Proposal lifecycle event types emitted by the proposal substrate (#225).
 const PROPOSAL_EVENT_TYPES = new Set(["promoted", "rejected"]);
 // ── Helpers ──────────────────────────────────────────────────────────────────

package/dist/commands/sources/init.js

@@ -55,7 +55,19 @@ function assertInitSandbox(stashDir, dirExplicitlyProvided) {
 function isUnderTestRunner() {
     return process.env.BUN_TEST === "1" || process.env.NODE_ENV === "test";
 }
+// ── Test seam ────────────────────────────────────────────────────────────────
+// Swap-and-restore override. Inert in production; only tests call the setter.
+let akmInitOverride;
+/** TEST-ONLY. Swap the implementation of `akmInit`; pass undefined to restore. */
+export function _setAkmInitForTests(fake) {
+    akmInitOverride = fake;
+}
 export async function akmInit(options) {
+    if (akmInitOverride)
+        return akmInitOverride(options);
+    return akmInitReal(options);
+}
+async function akmInitReal(options) {
     const dirExplicitlyProvided = options?.dir != null;
     const setDefault = options?.setDefault === true;
     const stashDir = options?.dir ? path.resolve(options.dir) : getDefaultStashDir();

package/dist/commands/sources/schema-repair.js

@@ -23,7 +23,7 @@ import { resolveStandardsContext } from "../../core/standards/resolve-standards-
 import { info } from "../../core/warn.js";
 import { resolveAssetPath } from "../../indexer/walk/path-resolver.js";
 import { chatCompletion, parseEmbeddedJsonResponse } from "../../llm/client.js";
-import { createProposal, isProposalSkipped } from "../proposal/validators/proposals.js";
+import { createProposal, isProposalSkipped } from "../proposal/repository.js";
 // ── Constants ────────────────────────────────────────────────────────────────
 /** Minimum gap between schema-repair attempts on the same asset. */
 const SCHEMA_REPAIR_COOLDOWN_MS = 7 * 24 * 60 * 60 * 1000; // 7 days

package/dist/commands/sources/sources-cli.js

@@ -23,7 +23,7 @@ import { loadConfig } from "../../core/config/config.js";
 import { UsageError } from "../../core/errors.js";
 import { appendEvent } from "../../core/events.js";
 import { resolveSourceEntries } from "../../indexer/search/search-source.js";
-import { getHyphenatedBoolean, parseFlagValue } from "../../output/context.js";
+import { parseFlagValue } from "../../output/context.js";
 import { resolveWritableOverride, saveGitStash } from "../../sources/providers/git.js";
 import { pkgVersion } from "../../version.js";
 import { akmHistory } from "./history.js";
@@ -125,8 +125,8 @@ export const upgradeCommand = defineJsonCommand({
             output("upgrade", check);
             return;
         }
-        const skipChecksum = getHyphenatedBoolean(args, "skip-checksum");
-        const skipPostUpgrade = getHyphenatedBoolean(args, "skip-post-upgrade");
+        const skipChecksum = args["skip-checksum"];
+        const skipPostUpgrade = args["skip-post-upgrade"];
         const result = await performUpgrade(check, { force: args.force, skipChecksum, skipPostUpgrade });
         output("upgrade", result);
     },

package/dist/commands/sources/stash-cli.js

@@ -25,8 +25,8 @@
  * SIGINT/SIGTERM handlers in a try/finally — left byte-for-byte untouched.
  */
 import path from "node:path";
-import * as p from "@clack/prompts";
 import { defineCommand } from "citty";
+import * as p from "../../cli/clack.js";
 import { defineJsonCommand, output, runWithJsonErrors } from "../../cli/shared.js";
 import { assertFlatAssetName } from "../../core/asset/asset-create.js";
 import { isHttpUrl } from "../../core/common.js";
@@ -60,7 +60,7 @@ export const initCommand = defineJsonCommand({
         const legacyDir = parseFlagValue(process.argv, "--stashDir") ?? parseFlagValue(process.argv, "--stash-dir");
         const result = await akmInit({
             dir: args.dir ?? legacyDir,
-            setDefault: getHyphenatedBoolean(args, "set-default"),
+            setDefault: args["set-default"],
         });
         output("init", result);
     },

package/dist/commands/tasks/default-tasks.js

@@ -76,12 +76,19 @@ const DEFAULT_DEPS = {
     list: akmTasksList,
     add: akmTasksAdd,
 };
+let defaultTasksOverrides;
+/** TEST-ONLY. Swap the CI/server/register functions; pass undefined to restore. */
+export function _setDefaultTasksForTests(fakes) {
+    defaultTasksOverrides = fakes;
+}
 /**
  * Decide whether `akm setup` is running in a CI environment, where it must
  * register NO scheduled tasks. Mirrors the common `CI=true` convention used by
  * GitHub Actions, GitLab CI, CircleCI, etc.
  */
 export function isCiEnvironment(env = process.env) {
+    if (defaultTasksOverrides?.isCiEnvironment)
+        return defaultTasksOverrides.isCiEnvironment(env);
     const ci = env.CI;
     if (ci === undefined || ci === null)
         return false;
@@ -95,6 +102,8 @@ export function isCiEnvironment(env = process.env) {
  * Used as the default when setup is non-interactive (no TTY / --yes / CI).
  */
 export function detectServerDefault() {
+    if (defaultTasksOverrides?.detectServerDefault)
+        return defaultTasksOverrides.detectServerDefault();
     if (os.platform() !== "linux")
         return false;
     // A laptop exposes a battery under /sys/class/power_supply/BAT*. Absence of
@@ -121,6 +130,9 @@ export function detectServerDefault() {
  *   never re-disable a user-enabled task).
  */
 export async function registerDefaultTasks(options = {}) {
+    if (defaultTasksOverrides?.registerDefaultTasks) {
+        return defaultTasksOverrides.registerDefaultTasks(options);
+    }
     if (isCiEnvironment()) {
         return { skipped: true, reason: "ci", created: [], existing: [], toggled: [] };
     }

package/dist/commands/tasks/tasks-cli.js

@@ -15,7 +15,6 @@
 import { defineCommand } from "citty";
 import { parsePositiveIntFlag } from "../../cli/parse-args.js";
 import { defineGroupCommand, defineJsonCommand, output, runWithJsonErrors } from "../../cli/shared.js";
-import { getHyphenatedArg } from "../../output/context.js";
 import { detectServerDefault, registerDefaultTasks } from "./default-tasks.js";
 import { akmTasksAdd, akmTasksDoctor, akmTasksHistory, akmTasksList, akmTasksRemove, akmTasksRun, akmTasksSetEnabled, akmTasksShow, akmTasksSync, parseTaskRef, } from "./tasks.js";
 const tasksAddCommand = defineJsonCommand({
@@ -51,7 +50,7 @@ const tasksAddCommand = defineJsonCommand({
             profile: args.profile,
             params: args.params,
             name: args.name,
-            when_to_use: getHyphenatedArg(args, "when-to-use"),
+            when_to_use: args["when-to-use"],
             description: args.description,
             tags: args.tags
                 ? args.tags

package/dist/commands/wiki-cli.js

@@ -16,7 +16,6 @@ import { defineGroupCommand, defineJsonCommand, output, runWithJsonErrors } from
 import { resolveStashDir } from "../core/common.js";
 import { loadConfig, resolveConfiguredSources } from "../core/config/config.js";
 import { ConfigError, UsageError } from "../core/errors.js";
-import { getHyphenatedArg, getHyphenatedBoolean } from "../output/context.js";
 import { akmAgentDispatch } from "./agent/agent-dispatch.js";
 import { readKnowledgeInput } from "./read/knowledge.js";
 import { buildWebsiteOptions } from "./sources/add-cli.js";
@@ -108,7 +107,7 @@ const wikiRemoveCommand = defineJsonCommand({
             process.stderr.write("Aborted.\n");
             return;
         }
-        const withSources = getHyphenatedBoolean(args, "with-sources");
+        const withSources = args["with-sources"];
         const { removeWiki } = await import("../wiki/wiki.js");
         const { akmIndex } = await import("../indexer/indexer.js");
         const stashDir = resolveStashDir();
@@ -244,7 +243,7 @@ const wikiIngestCommand = defineJsonCommand({
         if (!profileName) {
             throw new UsageError("akm wiki ingest requires an agent profile. Pass --profile <name> or set defaults.agent in config.", "MISSING_REQUIRED_ARGUMENT", "Available profiles are listed under profiles.agent in your config. Run `akm config get profiles.agent` to inspect.");
         }
-        const timeoutMs = parsePositiveIntFlag(getHyphenatedArg(args, "timeout-ms"), "--timeout-ms");
+        const timeoutMs = parsePositiveIntFlag(args["timeout-ms"], "--timeout-ms");
         const model = getStringArg(args, "model");
         const { getDefaultLlmConfig } = await import("../core/config/config.js");
         const dispatchResult = await akmAgentDispatch({

package/dist/core/common.js

@@ -132,9 +132,9 @@ export function writeFileAtomic(target, content, mode) {
  *
  * Throws if no valid stash directory is found.
  */
-export function resolveStashDir(_options) {
+export function resolveStashDir(_options, env = process.env) {
     // 1. Env var override (for CI, scripts, testing)
-    const envDir = process.env.AKM_STASH_DIR?.trim();
+    const envDir = env.AKM_STASH_DIR?.trim();
     if (envDir) {
         return validateStashDir(envDir);
     }
@@ -143,7 +143,7 @@ export function resolveStashDir(_options) {
     if (configStashDir)
         return validateStashDir(configStashDir);
     // 3. Platform default — use it if it exists
-    const defaultDir = getDefaultStashDir();
+    const defaultDir = getDefaultStashDir(env);
     if (isValidDirectory(defaultDir)) {
         return defaultDir;
     }