akm-cli 0.9.0-beta.9 → 0.9.0-rc.0

package/docs/data-and-telemetry.md

@@ -48,8 +48,8 @@ Everything in the cache is regenerable. It is safe to delete the entire cache di
 
 | Path | Contents | Safe to delete? |
 |---|---|---|
-| `config-backups/config-<timestamp>.json` | Pre-migration config snapshots (5 retained) | Yes |
-| `config-backups/config.latest.json` | Latest backup alias | Yes |
+| `config-backups/config-<timestamp>.json` | Pre-save config snapshots (5 retained; owner-only permissions — file `0600`, dir `0700`, since 08-F4) | Yes |
+| `config-backups/config.latest.json` | Latest backup alias (owner-only `0600`) | Yes |
 | `registry/` | Downloaded registry tarballs (stash packages from npm, GitHub, etc.) | Yes — re-downloaded on next `akm add` or `akm update` |
 | `registry-index/` | Legacy per-URL JSON cache (v0.7 artifact) | Yes — fully replaced by `index.db` in 0.8.0 |
 | `semantic-status.json` | Semantic index build status marker | Yes |
@@ -63,7 +63,7 @@ Override: set `AKM_CACHE_DIR` or `XDG_CACHE_HOME`.
 
 | Path | Contents | Safe to delete? |
 |---|---|---|
-| `<stash>/` | All your asset files: agents, skills, commands, knowledge, workflows, memories, vaults, wikis, lessons | **No** — this is YOUR data |
+| `<stash>/` | All your asset files: agents, skills, commands, knowledge, workflows, memories, env files, secrets, wikis, lessons, facts | **No** — this is YOUR data |
 | `<stash>/.akm/` | Hidden AKM metadata (v0.7 proposals, legacy runs) | Caution — check for pending proposals first |
 
 Override: set `AKM_STASH_DIR` (or configure `stashDir` in `config.json`).
@@ -130,7 +130,7 @@ An append-only log of every mutating action you perform with AKM. Events are sto
 
 ### 2. Proposals Table
 
-The proposal queue: pending, accepted, and rejected improvement proposals for your stash assets. Generated by `akm reflect` and the improve loop.
+The proposal queue: pending, accepted, and rejected improvement proposals for your stash assets. Generated by `akm improve`, `akm propose`, and related proposal-producing flows.
 
 Contents:
 - Proposal UUID (primary key)
@@ -216,6 +216,7 @@ You can redirect any AKM directory to a custom path:
 |---|---|
 | `AKM_CONFIG_DIR` | Config directory (`~/.config/akm/`) |
 | `AKM_DATA_DIR` | Data directory (`~/.local/share/akm/`) |
+| `AKM_SQLITE_JOURNAL_MODE` | SQLite journal mode: `WAL` (default), `DELETE`, or `TRUNCATE`. Use `DELETE`/`TRUNCATE` on network filesystems (NFS/SMB) where WAL is impossible. When left at the `WAL` default, akm auto-detects a network FS for the data dir and falls back to `DELETE`. |
 | `AKM_STATE_DIR` | State directory (`~/.local/state/akm/`) |
 | `AKM_CACHE_DIR` | Cache directory (`~/.cache/akm/`) |
 | `AKM_STASH_DIR` | Default stash directory (`~/akm/`) |

package/docs/migration/release-notes/0.7.0.md

@@ -261,6 +261,6 @@ akm proposal accept <id>
   baseline. The canonical reference for upgrading.
 - [v0.5 → v0.6](../v0.5-to-v0.6.md) — the older terminology cut and
   registry schema v3.
-- [v1 architecture spec](../../technical/v1-architecture-spec.md) —
+- [v1 architecture spec](../../archive/v1-architecture-spec.md) —
   the architecture contract that 0.7.0 commits to maintain through
   1.0 GA.

package/docs/migration/release-notes/0.9.0.md

@@ -0,0 +1,39 @@
+Migration notes for akm v0.9.0
+
+This is the final 0.9.0 cut. If you were already running a 0.9.0 beta, the
+main upgrade work is to align scripts, prompts, and stash layout with the
+released command surface.
+
+Key operator-facing changes:
+
+- Node.js is supported again for the published CLI. Install with Bun, Node.js
+  >= 20.12, or the prebuilt binary.
+- The legacy `vault` asset type and `akm vault ...` command family are gone.
+  Use `env:` for whole `.env` groups and `secret:` for a single sensitive
+  value.
+- `akm-migrate-storage` still ships and still performs the non-destructive
+  `vaults/` -> `env/` copy for older stashes. Run it before indexing if you are
+  upgrading from a stash that still stores `.env` files only under `vaults/`.
+- Proposal workflow is fully consolidated around `akm improve`, `akm propose`,
+  and `akm proposal ...`. Update any old `akm reflect`, `akm distill`,
+  `akm accept`, `akm reject`, or `akm proposals` usage.
+
+Primary public command family for 0.9.0:
+
+- `akm improve <ref> [--task "..."]`
+- `akm propose <type> <name> (--task "..." | --file <path>)`
+- `akm proposal list`
+- `akm proposal show <id>`
+- `akm proposal diff <id>`
+- `akm proposal accept <id>`
+- `akm proposal reject <id> --reason "..."`
+
+Recommended post-upgrade checks:
+
+- Run `akm help migrate 0.9.0` on every machine where the CLI is installed.
+- Run `akm-migrate-storage --yes` once if the stash ever used `vaults/`.
+- Rebuild the index with `akm index`.
+- Review agent instructions and docs for old `vault`, `reflect`, and `distill`
+  examples.
+
+Full changelog: https://github.com/itlackey/akm/blob/main/CHANGELOG.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akm-cli",
-  "version": "0.9.0-beta.9",
+  "version": "0.9.0-rc.0",
   "type": "module",
   "description": "akm (Agent Knowledge Management) — A package manager for AI agent skills, commands, tools, and knowledge. Works with Claude Code, OpenCode, Cursor, and any AI coding assistant.",
   "keywords": [
@@ -46,28 +46,28 @@
     "docs/data-and-telemetry.md"
   ],
   "bin": {
-    "akm": "dist/cli.js",
-    "akm-migrate-storage": "dist/scripts/migrate-storage.js"
+    "akm": "dist/akm",
+    "akm-migrate-storage": "dist/akm-migrate-storage"
   },
   "scripts": {
-    "preinstall": "node -e \"var ua=process.env.npm_config_user_agent||'';var major=parseInt((process.versions.node||'0').split('.')[0],10);if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL||major>=20){process.exit(0)}console.error('\\n  ERROR: akm-cli requires the Bun runtime (https://bun.sh), Node.js >= 20, or the prebuilt binary.\\n  Install options:\\n    1. Bun:    curl -fsSL https://bun.sh/install | bash  &&  bun install -g akm-cli\\n    2. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n');process.exit(1)\"",
+    "preinstall": "node -e \"var ua=process.env.npm_config_user_agent||'';var v=(process.versions.node||'0').split('.').map(function(n){return parseInt(n,10)||0});var ok=v[0]>20||(v[0]===20&&(v[1]>12||(v[1]===12&&v[2]>=0)));if(process.versions.bun||ua.startsWith('bun/')||process.env.BUN_INSTALL||ok){process.exit(0)}console.error('\\n  ERROR: akm-cli requires the Bun runtime (https://bun.sh), Node.js >= 20.12, or the prebuilt binary.\\n  Install options:\\n    1. Bun:    curl -fsSL https://bun.sh/install | bash  &&  bun install -g akm-cli\\n    2. Node:   upgrade to Node.js 20.12 or newer (https://nodejs.org)\\n    3. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\\n');process.exit(1)\"",
     "build": "rm -rf dist && bun scripts/gen-config-schema.ts &&bun run tsc --project ./tsconfig.build.json && bun scripts/copy-assets.ts && bun scripts/fix-esm-extensions.ts",
     "check": "bun run lint && bunx tsc --noEmit && bun run test:unit && bun run test:integration",
     "check:fast": "bun run lint && bunx tsc --noEmit && bun run test:unit",
     "check:changed": "bun test tests/output-baseline.test.ts tests/integration/e2e.test.ts tests/stash-search.test.ts && bun run lint && bunx tsc --noEmit",
-    "test": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests --path-ignore-patterns=tests/integration",
-    "test:unit": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests --path-ignore-patterns=tests/integration",
-    "test:integration": "bun test --parallel=${TEST_PARALLEL:-12} --timeout=30000 ./tests/integration ./tests/commands ./tests/workflows",
+    "sweep:tmp": "bun scripts/sweep-test-tmp.ts",
+    "test": "bash scripts/test-unit.sh",
+    "test:unit": "bash scripts/test-unit.sh",
+    "test:integration": "bun run sweep:tmp && bun test --timeout=30000 ./tests/integration",
     "test:node-smoke": "bun scripts/node-smoke.ts",
     "test:node-compat": "AKM_NODE_COMPAT_TESTS=1 bun test --timeout=120000 tests/integration/node-compat.test.ts",
-    "test:sharded": "bun test ./tests --shard=1/4 & bun test ./tests --shard=2/4 & bun test ./tests --shard=3/4 & bun test ./tests --shard=4/4 & wait",
     "test:time": "bun scripts/test-timing-report.ts",
     "lint:isolation": "bun scripts/lint-tests-isolation.ts",
     "lint:devto-posts": "bun scripts/lint-devto-posts.ts",
     "lint:devto-posts:fix": "bun scripts/lint-devto-posts.ts --fix",
     "publish:devto": "npx -y @sinedied/devto-cli push \"docs/posts/**/*.md\" --token \"$DEVTO_TOKEN\" --repo \"$GITHUB_REPOSITORY\" --branch \"${GITHUB_REF_NAME:-main}\" --reconcile",
     "release:check": "./tests/release-check.sh",
-    "lint": "bunx biome check src/ tests/ && bun scripts/lint-tests-isolation.ts && bun scripts/lint-license-headers.ts && bun scripts/lint-runtime-boundary.ts",
+    "lint": "bunx biome check src/ tests/ && bun scripts/lint-tests-isolation.ts && bun scripts/lint-license-headers.ts && bun scripts/lint-runtime-boundary.ts && bun scripts/lint-repository-sql.ts && bun scripts/gen-config-schema.ts --check",
     "lint:runtime-boundary": "bun scripts/lint-runtime-boundary.ts",
     "lint:tests-isolation": "bun scripts/lint-tests-isolation.ts",
     "lint:fix": "bunx biome check --write src/ tests/",
@@ -93,7 +93,7 @@
   },
   "engines": {
     "bun": ">=1.0.0",
-    "node": ">=20.0.0"
+    "node": ">=20.12.0"
   },
   "dependencies": {
     "@clack/prompts": "^1.3.0",

package/dist/assets/tasks/core/update-stashes.yml

@@ -1,4 +0,0 @@
-schedule: "0 1 * * *"
-command: akm update
-enabled: true
-description: Pull latest changes for all managed stash sources

package/dist/commands/db-cli.js

@@ -1,23 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * CLI command surface for `akm db ...`.
- *
- * MVP scope: only `akm db backups` is exposed. It lists the pre-upgrade
- * snapshots written by `backupDataDir()` under `<dataDir>/backups/`.
- *
- * Restoration is intentionally NOT a CLI subcommand for MVP — operators are
- * expected to stop akm and use `scripts/migrations/restore-data-dir.sh` (or a
- * plain `mv`/`cp`) to recover. Keeping the surface narrow lets us evolve the
- * backup format under the hood without locking in an API.
- */
-import { getDataDir } from "../core/paths.js";
-import { listBackups } from "../indexer/db/db-backup.js";
-export function akmDbBackups() {
-    const dataDir = getDataDir();
-    return {
-        dataDir,
-        backups: listBackups(dataDir),
-    };
-}

package/dist/indexer/db/db-backup.js

@@ -1,376 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * MVP data-directory backup for AKM.
- *
- * The DB upgrade path in `src/indexer/db/db.ts` `handleVersionUpgrade()` is
- * intentionally destructive: when `DB_VERSION` bumps and a stored DB is at an
- * older version, ~17 tables are dropped and recreated. Until 0.9.0 ships a
- * full migration framework, this MVP captures a recursive copy of the entire
- * data directory just before that drop happens so an operator can manually
- * recover lost rows by stopping akm and moving the backup contents back over
- * the live data dir (see `scripts/migrations/restore-data-dir.sh`).
- *
- * The helper is intentionally narrow:
- *   - No `VACUUM INTO`, no selective table backup — just `fs.cpSync` of the
- *     data directory into `<dataDir>/backups/<timestamp>-pre-v<targetVersion>/`.
- *   - Skips the `backups/` subdirectory inside the data dir so we never
- *     recurse into our own backup history.
- *   - Opt-out via `AKM_DB_BACKUP=0`. Backup failures NEVER abort the upgrade —
- *     they warn and proceed (the alternative would brick a user trying to
- *     start a binary that bumped DB_VERSION on a full disk).
- *   - Retention is FIFO with default of 5, configurable via
- *     `AKM_DB_BACKUP_RETAIN`.
- *   - Disk-space guard: refuses to write when free space on the destination
- *     filesystem is less than 1.1× the source size.
- */
-import fs from "node:fs";
-import path from "node:path";
-import { bestEffort } from "../../core/best-effort.js";
-import { warn } from "../../core/warn.js";
-/** Default reason recorded for backups that don't override it. */
-export const DEFAULT_BACKUP_REASON = "version-upgrade";
-/** Reason recorded for backups taken before the embedding-dim drop path. */
-export const EMBEDDING_DIM_CHANGE_REASON = "embedding-dim-change";
-const BACKUPS_DIR_NAME = "backups";
-const BACKUP_METADATA_FILE = "backup.meta.json";
-const DEFAULT_RETAIN = 5;
-const FREE_SPACE_MULTIPLIER = 1.1;
-/**
- * Resolve the configured retention count from the env, with a hard floor of 1.
- *
- * Invalid values (non-integer, negative) fall back to the default and emit a
- * one-line warning so operators notice their env var is wrong.
- */
-export function resolveRetention(env = process.env) {
-    const raw = env.AKM_DB_BACKUP_RETAIN?.trim();
-    if (!raw)
-        return DEFAULT_RETAIN;
-    const parsed = Number.parseInt(raw, 10);
-    if (Number.isNaN(parsed) || parsed < 1) {
-        warn("[akm] AKM_DB_BACKUP_RETAIN=%s is not a positive integer; falling back to %d", raw, DEFAULT_RETAIN);
-        return DEFAULT_RETAIN;
-    }
-    return parsed;
-}
-/**
- * Returns true when the user has explicitly opted out via `AKM_DB_BACKUP=0`
- * (or `false`/`no`/`off`). Any other value — including unset — opts in.
- */
-export function isBackupDisabled(env = process.env) {
-    const raw = env.AKM_DB_BACKUP?.trim().toLowerCase();
-    if (!raw)
-        return false;
-    return raw === "0" || raw === "false" || raw === "no" || raw === "off";
-}
-/**
- * Recursively sum the byte size of `dirPath`, skipping the embedded backups
- * directory so the size we report (and check against free space) reflects
- * what we'd actually copy.
- */
-export function measureDataDirSize(dirPath) {
-    if (!fs.existsSync(dirPath))
-        return 0;
-    let total = 0;
-    const stack = [dirPath];
-    while (stack.length > 0) {
-        const current = stack.pop();
-        if (current === undefined)
-            break;
-        let entries;
-        try {
-            entries = fs.readdirSync(current, { withFileTypes: true });
-        }
-        catch {
-            // Unreadable directory — skip; we don't want measurement to throw.
-            continue;
-        }
-        for (const entry of entries) {
-            const full = path.join(current, entry.name);
-            // Skip the embedded backups directory at the root so we don't
-            // double-count prior backups in size calculations.
-            if (current === dirPath && entry.name === BACKUPS_DIR_NAME && entry.isDirectory())
-                continue;
-            if (entry.isDirectory()) {
-                stack.push(full);
-            }
-            else if (entry.isFile()) {
-                bestEffort(() => {
-                    total += fs.statSync(full).size;
-                }, "file vanished between readdir and stat");
-            }
-        }
-    }
-    return total;
-}
-/**
- * Best-effort free-space query for the filesystem hosting `dirPath`. Returns
- * `null` when the runtime cannot report statfs (older Node/Bun, exotic FS) —
- * the caller treats `null` as "skip the disk-space check" rather than
- * "abort the backup".
- */
-function getFreeSpace(dirPath) {
-    try {
-        // `fs.statfsSync` is available in Node 18.15+ and Bun 1.0+.
-        const stats = fs.statfsSync;
-        if (!stats)
-            return null;
-        const res = stats(dirPath);
-        return Number(res.bavail * res.bsize);
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Format the current time into a filename-safe timestamp.
- *
- * Example: `2026-05-19T04-59-36`.
- */
-function formatTimestamp(d) {
-    // ISO 8601 without colons/dots so the path is portable to Windows + tarballs.
-    return d
-        .toISOString()
-        .replace(/[:.]/g, "-")
-        .replace(/Z$/, "")
-        .replace(/-\d{3}$/, "");
-}
-export function listBackups(dataDir) {
-    const backupsRoot = path.join(dataDir, BACKUPS_DIR_NAME);
-    if (!fs.existsSync(backupsRoot))
-        return [];
-    const entries = fs.readdirSync(backupsRoot, { withFileTypes: true });
-    const results = [];
-    for (const entry of entries) {
-        if (!entry.isDirectory())
-            continue;
-        const full = path.join(backupsRoot, entry.name);
-        const metaPath = path.join(full, BACKUP_METADATA_FILE);
-        let createdAt;
-        let sourceVersion = null;
-        let sizeBytes;
-        let reason = DEFAULT_BACKUP_REASON;
-        if (fs.existsSync(metaPath)) {
-            bestEffort(() => {
-                const raw = fs.readFileSync(metaPath, "utf8");
-                const parsed = JSON.parse(raw);
-                if (typeof parsed.createdAt === "string")
-                    createdAt = parsed.createdAt;
-                if (typeof parsed.sourceVersion === "number")
-                    sourceVersion = parsed.sourceVersion;
-                else if (parsed.sourceVersion === null)
-                    sourceVersion = null;
-                if (typeof parsed.sizeBytes === "number")
-                    sizeBytes = parsed.sizeBytes;
-                if (typeof parsed.reason === "string" && parsed.reason.length > 0)
-                    reason = parsed.reason;
-            }, "malformed backup metadata — fall back to filesystem-derived values");
-        }
-        if (!createdAt) {
-            try {
-                createdAt = fs.statSync(full).mtime.toISOString();
-            }
-            catch {
-                createdAt = new Date(0).toISOString();
-            }
-        }
-        if (sizeBytes === undefined) {
-            sizeBytes = measureDataDirSize(full);
-        }
-        results.push({
-            path: full,
-            name: entry.name,
-            createdAt,
-            sizeBytes,
-            sourceVersion,
-            reason,
-        });
-    }
-    // Sort newest first.
-    results.sort((a, b) => (a.createdAt < b.createdAt ? 1 : a.createdAt > b.createdAt ? -1 : 0));
-    return results;
-}
-/**
- * Drop oldest backups until at most `retain` remain. The newest backup (the
- * one we just created) is always preserved — pruning happens AFTER the new
- * backup is written, so `retain=5` plus a fresh write means we keep the new
- * write and prune down to 5 total entries.
- */
-function pruneOldBackups(dataDir, retain) {
-    const existing = listBackups(dataDir);
-    if (existing.length <= retain)
-        return;
-    const toRemove = existing.slice(retain);
-    for (const entry of toRemove) {
-        try {
-            fs.rmSync(entry.path, { recursive: true, force: true });
-        }
-        catch (err) {
-            warn("[akm] failed to prune old backup %s — %s", entry.path, err instanceof Error ? err.message : String(err));
-        }
-    }
-}
-/**
- * Capture a recursive copy of `dataDir` under `<dataDir>/backups/`, skipping
- * the backups subdirectory itself. Returns the BackupResult on success or
- * `null` when the backup was skipped (opt-out, missing data dir, insufficient
- * disk space, or a copy error — all of which should be non-fatal so the
- * upgrade path can still proceed).
- */
-export function backupDataDir(opts) {
-    const env = opts.env ?? process.env;
-    if (isBackupDisabled(env))
-        return null;
-    const { dataDir, sourceVersion, targetVersion } = opts;
-    const reason = opts.reason && opts.reason.length > 0 ? opts.reason : DEFAULT_BACKUP_REASON;
-    if (!fs.existsSync(dataDir)) {
-        // Fresh install — nothing to back up.
-        return null;
-    }
-    const dataDirStat = fs.statSync(dataDir);
-    if (!dataDirStat.isDirectory()) {
-        warn("[akm] data dir backup skipped — %s is not a directory", dataDir);
-        return null;
-    }
-    // Empty data dir (or only a `backups/` subdir) → nothing meaningful to back up.
-    const sourceSize = measureDataDirSize(dataDir);
-    if (sourceSize === 0)
-        return null;
-    const backupsRoot = path.join(dataDir, BACKUPS_DIR_NAME);
-    try {
-        fs.mkdirSync(backupsRoot, { recursive: true });
-    }
-    catch (err) {
-        warn("[akm] data dir backup skipped — could not create %s: %s", backupsRoot, err instanceof Error ? err.message : String(err));
-        return null;
-    }
-    // Disk-space guard. Skip the check when statfs is unavailable.
-    const free = getFreeSpace(backupsRoot);
-    if (free !== null && free < sourceSize * FREE_SPACE_MULTIPLIER) {
-        warn("[akm] data dir backup skipped — free space %d bytes is less than 1.1× source size %d bytes (need %d)", free, sourceSize, Math.ceil(sourceSize * FREE_SPACE_MULTIPLIER));
-        return null;
-    }
-    const now = (opts.now ?? (() => new Date()))();
-    const stamp = formatTimestamp(now);
-    // Reason tags drive the directory suffix so operators can tell a
-    // version-upgrade snapshot apart from an embedding-dim-change snapshot.
-    // `version-upgrade` keeps the historical `pre-v<N>` suffix for backward
-    // compatibility with `scripts/migrations/restore-data-dir.sh` and existing
-    // tests; any other reason is appended verbatim.
-    const dirSuffix = reason === DEFAULT_BACKUP_REASON ? `pre-v${targetVersion}` : reason;
-    const dirName = `${stamp}-${dirSuffix}`;
-    const destPath = path.join(backupsRoot, dirName);
-    // If a previous run on the same second tried to write this name, append a
-    // short disambiguator. We don't want to overwrite or merge into an existing
-    // backup directory.
-    let finalDest = destPath;
-    let suffix = 1;
-    while (fs.existsSync(finalDest)) {
-        finalDest = `${destPath}-${suffix}`;
-        suffix += 1;
-    }
-    try {
-        // We can't use fs.cpSync directly because the destination
-        // (<dataDir>/backups/<stamp>-pre-v<N>/) is inside the source dataDir, and
-        // cpSync refuses to copy into a subdirectory of the source. So we do a
-        // manual recursive walk that explicitly skips the backups subtree, plus
-        // the lockfile/sentinel that would race with any live process.
-        copyDataDirExcludingBackups(dataDir, finalDest);
-    }
-    catch (err) {
-        warn("[akm] data dir backup failed — %s; upgrade will proceed without a snapshot", err instanceof Error ? err.message : String(err));
-        // Best-effort cleanup of the partial copy so we don't litter the data dir.
-        bestEffort(() => fs.rmSync(finalDest, { recursive: true, force: true }), "cleanup partial backup copy");
-        return null;
-    }
-    const createdAt = now.toISOString();
-    const metadata = {
-        schemaVersion: 1,
-        createdAt,
-        sourceVersion,
-        targetVersion,
-        sizeBytes: sourceSize,
-        reason,
-        hostname: tryHostname(),
-        notes: reason === DEFAULT_BACKUP_REASON
-            ? "Created by AKM before a destructive DB version upgrade. Restore manually by stopping akm and copying the contents back over the live data dir."
-            : `Created by AKM before a destructive ${reason} operation. Restore manually by stopping akm and copying the contents back over the live data dir.`,
-    };
-    try {
-        fs.writeFileSync(path.join(finalDest, BACKUP_METADATA_FILE), JSON.stringify(metadata, null, 2));
-    }
-    catch (err) {
-        // Metadata is non-essential — warn but keep the copy.
-        warn("[akm] data dir backup created at %s but metadata write failed — %s", finalDest, err instanceof Error ? err.message : String(err));
-    }
-    const retain = resolveRetention(env);
-    pruneOldBackups(dataDir, retain);
-    return {
-        path: finalDest,
-        name: path.basename(finalDest),
-        createdAt,
-        sizeBytes: sourceSize,
-        sourceVersion,
-        targetVersion,
-        reason,
-    };
-}
-/**
- * Recursively copy `srcRoot` to `destRoot`, skipping:
- *   - `<srcRoot>/backups` (so we don't recurse into our own backup history)
- *   - `<srcRoot>/akm.lock` and `<srcRoot>/akm.lock.lck` (per-process state
- *     that would race with a live process holding the lock)
- *
- * Implemented manually because `fs.cpSync` refuses to copy a directory into a
- * subdirectory of itself, and our destination (`<dataDir>/backups/<stamp>`)
- * is by design inside the source `<dataDir>`.
- */
-function copyDataDirExcludingBackups(srcRoot, destRoot) {
-    fs.mkdirSync(destRoot, { recursive: true });
-    const stack = [{ src: srcRoot, dest: destRoot }];
-    while (stack.length > 0) {
-        const frame = stack.pop();
-        if (frame === undefined)
-            break;
-        const { src, dest } = frame;
-        const entries = fs.readdirSync(src, { withFileTypes: true });
-        for (const entry of entries) {
-            // Skip the embedded backups directory and the lockfile/sentinel — only
-            // at the root level. (A `backups` directory deep in a wiki source tree,
-            // for instance, must still be copied.)
-            if (src === srcRoot) {
-                if (entry.name === BACKUPS_DIR_NAME && entry.isDirectory())
-                    continue;
-                if (entry.name === "akm.lock" || entry.name === "akm.lock.lck")
-                    continue;
-            }
-            const srcPath = path.join(src, entry.name);
-            const destPath = path.join(dest, entry.name);
-            if (entry.isDirectory()) {
-                fs.mkdirSync(destPath, { recursive: true });
-                stack.push({ src: srcPath, dest: destPath });
-            }
-            else if (entry.isFile()) {
-                fs.copyFileSync(srcPath, destPath);
-            }
-            else if (entry.isSymbolicLink()) {
-                // Preserve symlinks as-is rather than dereferencing them. A stash
-                // dir occasionally carries symlinked source roots; following them
-                // could explode the backup size unexpectedly.
-                const target = fs.readlinkSync(srcPath);
-                bestEffort(() => fs.symlinkSync(target, destPath), "symlink creation can fail on Windows without admin");
-            }
-            // Other entry types (block/character/fifo/socket) are silently skipped.
-        }
-    }
-}
-function tryHostname() {
-    try {
-        const os = require("node:os");
-        return os.hostname();
-    }
-    catch {
-        return undefined;
-    }
-}