akm-cli 0.9.0-beta.55 → 0.9.0-beta.57

package/dist/indexer/db/db.js

@@ -1278,9 +1278,8 @@ export function applyFeedbackToUtilityScore(db, entryId, positiveCount, negative
 /**
  * Re-link detached usage_events to their current entry_ids via entry_ref.
  *
- * After a full rebuild, entry IDs change. This query matches events to their
- * new entry rows using the stable `entry_ref` ("type:name") column so usage
- * history survives a full reindex.
+ * After a full rebuild, entry IDs change. This restores each event's link
+ * using the stable `entry_ref` column so usage history survives a reindex.
  */
 export function relinkUsageEvents(db) {
     bestEffort(() => {
@@ -1297,17 +1296,34 @@ export function relinkUsageEvents(db) {
       WHERE entry_id IS NOT NULL
         AND entry_id NOT IN (SELECT id FROM entries)
     `);
-        // Step 2: re-resolve any null entry_id from entry_ref against the
-        // current entries table. Picks up entries that were re-created with
-        // the same ref (e.g. an asset moved between sources).
-        db.exec(`
-      UPDATE usage_events SET entry_id = (
-        SELECT e.id FROM entries e
-        WHERE substr(e.entry_key, length(e.entry_key) - length(usage_events.entry_ref)) = ':' || usage_events.entry_ref
-        LIMIT 1
-      )
-      WHERE entry_id IS NULL AND entry_ref IS NOT NULL
-    `);
+        // Step 2: re-resolve any null entry_id from entry_ref against the current
+        // entries table, reusing the SAME canonical resolver the read path uses at
+        // insert time (`findEntryIdByRef` → `parseAssetRef`). Resolving per DISTINCT
+        // ref keeps this O(distinct-refs) indexed lookups instead of the previous
+        // O(events × entries) non-indexable `substr(entry_key, …)` scan. It also
+        // fixes a silent correctness bug: the old suffix match compared the RAW
+        // `entry_ref`, so origin-qualified refs ("source//type:name") never matched
+        // an `entry_key` and lost their usage history on every full rebuild.
+        const refs = db
+            .prepare("SELECT DISTINCT entry_ref AS ref FROM usage_events WHERE entry_id IS NULL AND entry_ref IS NOT NULL")
+            .all();
+        const update = db.prepare("UPDATE usage_events SET entry_id = ? WHERE entry_ref = ? AND entry_id IS NULL");
+        const relinkTx = db.transaction(() => {
+            for (const { ref } of refs) {
+                let id;
+                try {
+                    id = findEntryIdByRef(db, ref);
+                }
+                catch (err) {
+                    if (err instanceof Error && err.name === "UsageError")
+                        continue;
+                    throw err;
+                }
+                if (id !== undefined)
+                    update.run(id, ref);
+            }
+        });
+        relinkTx();
     }, "usage_events table may not exist yet during entry_id re-resolution");
 }
 // ── registry_index_cache helpers ─────────────────────────────────────────────

package/dist/indexer/feedback/utility-policy.js

@@ -29,16 +29,6 @@ const FEEDBACK_REWARD_POSITIVE = 1.0;
  * Reward 0.0 means "not helpful" (lowest MemRL signal).
  */
 const FEEDBACK_REWARD_NEGATIVE = 0.0;
-/**
- * Maximum total negative utility delta allowed in a single
- * `applyFeedbackToUtilityScore` call regardless of negativeCount.
- *
- * This caps the per-day negative impact (the function is called once per
- * feedback event — spamming 10 negatives in one session can move utility
- * at most `MAX_NEG_DELTA_PER_CALL`). The cap prevents a noisy negative-
- * feedback stream from silently destroying a high-utility asset's ranking.
- */
-export const MAX_NEG_DELTA_PER_CALL = 0.15;
 /**
  * Utility threshold below which a review-needed escalation is triggered.
  * When a previously high-utility asset (≥ HIGH_UTILITY_THRESHOLD) drops
@@ -57,8 +47,12 @@ export const HIGH_UTILITY_THRESHOLD = 0.5;
  *   reward   = weighted average of positive and negative signals
  *   nextUtil = clamp(currentUtil + lr × (reward − currentUtil), 0, 1)
  *
- * The negative impact is additionally capped at {@link MAX_NEG_DELTA_PER_CALL}
- * to prevent a noisy feedback stream from silently erasing a high-utility asset.
+ * The step is inherently bounded: reward ∈ [0, 1] and currentUtil ∈ [0, 1], so
+ * a single call moves utility by at most {@link FEEDBACK_LR} in either
+ * direction. `reward` is a proportion of the counts, not their magnitude, so
+ * with no positive signals the number of negatives is irrelevant (reward is 0
+ * whether there is 1 negative or 100). Mixing in positives shifts reward and so
+ * the step, but never past the learning-rate bound.
  *
  * Pure: no DB access. When both counts are zero, utility is unchanged.
  */
@@ -73,12 +67,8 @@ export function computeNextUtility(previousUtility, positiveCount, negativeCount
         : negativeCount > 0 && positiveCount === 0
             ? FEEDBACK_REWARD_NEGATIVE
             : (positiveCount * FEEDBACK_REWARD_POSITIVE + negativeCount * FEEDBACK_REWARD_NEGATIVE) / total;
-    // MemRL bounded-step EMA: lr × (reward − current)
-    let delta = FEEDBACK_LR * (reward - previousUtility);
-    // Per-call negative cap: if delta is negative (net negative feedback), cap it.
-    if (delta < 0) {
-        delta = Math.max(delta, -MAX_NEG_DELTA_PER_CALL);
-    }
+    // MemRL bounded-step EMA: lr × (reward − current). |delta| ≤ FEEDBACK_LR.
+    const delta = FEEDBACK_LR * (reward - previousUtility);
     const nextUtility = Math.max(0, Math.min(1, previousUtility + delta));
     const crossedReviewThreshold = previousUtility >= HIGH_UTILITY_THRESHOLD && nextUtility < UTILITY_REVIEW_THRESHOLD;
     return { previousUtility, nextUtility, crossedReviewThreshold };

package/dist/integrations/agent/profiles.js

@@ -1,7 +1,13 @@
 // This Source Code Form is subject to the terms of the Mozilla Public
 // License, v. 2.0. If a copy of the MPL was not distributed with this
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
-const COMMON_PASSTHROUGH = ["HOME", "PATH", "USER", "LANG", "LC_ALL", "TERM", "TMPDIR"];
+// AKM_EVENT_SOURCE carries usage-event provenance (improve/task) so that akm
+// invocations a spawned agent makes are recorded as machine traffic, not user
+// demand (DRIFT-6). Without it in the passthrough whitelist, buildChildEnv drops
+// the stamp at the agent boundary — e.g. `akm wiki ingest` spawns an agent whose
+// `akm curate/show/search` tool-calls then log source='user', silently inflating
+// every lane's read-back (GRR). It is a provenance tag, never a secret.
+const COMMON_PASSTHROUGH = ["HOME", "PATH", "USER", "LANG", "LC_ALL", "TERM", "TMPDIR", "AKM_EVENT_SOURCE"];
 /**
  * Built-in profiles for the five agent CLIs the v1 spec calls out
  * explicitly. The fields here are conservative defaults — every value is

package/dist/llm/embedders/cache.js

@@ -25,7 +25,9 @@ export function getCachedEmbedding(key) {
     return cached;
 }
 export function setCachedEmbedding(key, value) {
-    // Evict oldest entry if at capacity
+    // Delete first so an overwrite refreshes LRU recency AND is not counted as a
+    // new insert: only a genuinely new key at capacity should evict the oldest.
+    embedCache.delete(key);
     if (embedCache.size >= EMBED_CACHE_MAX) {
         const oldest = embedCache.keys().next().value;
         if (oldest !== undefined) {

package/dist/registry/resolve.js

@@ -238,6 +238,11 @@ function tryParseLocalRef(rawRef, explicitPath) {
     };
 }
 function isPathLikeRef(ref) {
+    // A leading `@` marks an npm scope (`@scope/pkg`), never a filesystem path —
+    // treat it as non-path so it falls through to the npm branch instead of
+    // being resolved (and rejected) as an explicit local path.
+    if (ref.startsWith("@"))
+        return false;
     if (ref === "." || ref === "..")
         return true;
     if (path.isAbsolute(ref))

package/dist/scripts/migrate-storage.js

@@ -9715,15 +9715,12 @@ function computeNextUtility(previousUtility, positiveCount, negativeCount) {
   }
   const total = positiveCount + negativeCount;
   const reward = positiveCount > 0 && negativeCount === 0 ? FEEDBACK_REWARD_POSITIVE : negativeCount > 0 && positiveCount === 0 ? FEEDBACK_REWARD_NEGATIVE : (positiveCount * FEEDBACK_REWARD_POSITIVE + negativeCount * FEEDBACK_REWARD_NEGATIVE) / total;
-  let delta = FEEDBACK_LR * (reward - previousUtility);
-  if (delta < 0) {
-    delta = Math.max(delta, -MAX_NEG_DELTA_PER_CALL);
-  }
+  const delta = FEEDBACK_LR * (reward - previousUtility);
   const nextUtility = Math.max(0, Math.min(1, previousUtility + delta));
   const crossedReviewThreshold = previousUtility >= HIGH_UTILITY_THRESHOLD && nextUtility < UTILITY_REVIEW_THRESHOLD;
   return { previousUtility, nextUtility, crossedReviewThreshold };
 }
-var FEEDBACK_LR = 0.1, FEEDBACK_REWARD_POSITIVE = 1, FEEDBACK_REWARD_NEGATIVE = 0, MAX_NEG_DELTA_PER_CALL = 0.15, UTILITY_REVIEW_THRESHOLD = 0.5, HIGH_UTILITY_THRESHOLD = 0.5;
+var FEEDBACK_LR = 0.1, FEEDBACK_REWARD_POSITIVE = 1, FEEDBACK_REWARD_NEGATIVE = 0, UTILITY_REVIEW_THRESHOLD = 0.5, HIGH_UTILITY_THRESHOLD = 0.5;
 
 // src/indexer/search/fts-query.ts
 function sanitizeFtsQuery(query) {
@@ -11182,7 +11179,7 @@ var init_opencode = __esm(() => {
 // src/integrations/agent/profiles.ts
 var COMMON_PASSTHROUGH, BUILTINS, HEADLESS_BUILTINS, BUILTIN_AGENT_PROFILE_NAMES;
 var init_profiles = __esm(() => {
-  COMMON_PASSTHROUGH = ["HOME", "PATH", "USER", "LANG", "LC_ALL", "TERM", "TMPDIR"];
+  COMMON_PASSTHROUGH = ["HOME", "PATH", "USER", "LANG", "LC_ALL", "TERM", "TMPDIR", "AKM_EVENT_SOURCE"];
   BUILTINS = {
     opencode: {
       name: "opencode",
@@ -17572,14 +17569,23 @@ function relinkUsageEvents(db) {
       WHERE entry_id IS NOT NULL
         AND entry_id NOT IN (SELECT id FROM entries)
     `);
-    db.exec(`
-      UPDATE usage_events SET entry_id = (
-        SELECT e.id FROM entries e
-        WHERE substr(e.entry_key, length(e.entry_key) - length(usage_events.entry_ref)) = ':' || usage_events.entry_ref
-        LIMIT 1
-      )
-      WHERE entry_id IS NULL AND entry_ref IS NOT NULL
-    `);
+    const refs = db.prepare("SELECT DISTINCT entry_ref AS ref FROM usage_events WHERE entry_id IS NULL AND entry_ref IS NOT NULL").all();
+    const update = db.prepare("UPDATE usage_events SET entry_id = ? WHERE entry_ref = ? AND entry_id IS NULL");
+    const relinkTx = db.transaction(() => {
+      for (const { ref } of refs) {
+        let id;
+        try {
+          id = findEntryIdByRef(db, ref);
+        } catch (err) {
+          if (err instanceof Error && err.name === "UsageError")
+            continue;
+          throw err;
+        }
+        if (id !== undefined)
+          update.run(id, ref);
+      }
+    });
+    relinkTx();
   }, "usage_events table may not exist yet during entry_id re-resolution");
 }
 function upsertRegistryIndexCache(db, registryUrl, indexJson, opts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akm-cli",
-  "version": "0.9.0-beta.55",
+  "version": "0.9.0-beta.57",
   "type": "module",
   "description": "akm (Agent Knowledge Management) — A package manager for AI agent skills, commands, tools, and knowledge. Works with Claude Code, OpenCode, Cursor, and any AI coding assistant.",
   "keywords": [