akm-cli 0.9.0-rc.2 → 0.9.0-rc.3

package/dist/core/config/config-schema.js

@@ -564,9 +564,9 @@ const ImproveProfileProcessesSchema = z
     // 0.8.0 removed the duplicated `feedbackDistillation` process key — it was
     // a thin wrapper around `processes.distill.enabled`. Keep the migration
     // hint so a stale config gets an actionable message rather than silently
-    // doing nothing. All OTHER unknown process keys are tolerated (passthrough)
-    // — see the unknown-key policy in this file's header. Hard-rejecting them
-    // turned benign cross-version skew into INVALID_CONFIG_FILE failures.
+    // doing nothing. Other unknown process keys remain preserved for
+    // cross-version compatibility, but an enabled one is rejected below because
+    // this version cannot execute it.
     if ("feedbackDistillation" in val) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -574,6 +574,18 @@ const ImproveProfileProcessesSchema = z
                 "It now controls both the orchestration gate and the LLM-call gate.",
         });
     }
+    for (const [name, process] of Object.entries(val)) {
+        if (!(name in IMPROVE_PROCESS_ENGINE_CAPABILITIES) &&
+            process !== null &&
+            typeof process === "object" &&
+            process.enabled === true) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: [name],
+                message: `Unknown enabled improve process "${name}"`,
+            });
+        }
+    }
 });
 export const ImproveProfileConfigSchema = z
     .object({

package/dist/core/config/config.js

@@ -4,7 +4,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { ConfigError } from "../errors.js";
-import { ensureMigrationBackupWithConfigLockHeld } from "../migration-backup.js";
+import { assertNoPendingMigrationOperation } from "../migration-operation.js";
 import { acquireConfigLock, backupExistingConfig, parseConfigText, readConfigText, withConfigLock, writeConfigAtomic, } from "./config-io.js";
 import { AkmConfigSchema, CURRENT_CONFIG_VERSION } from "./config-schema.js";
 import { deepMergeConfig } from "./deep-merge.js";
@@ -68,6 +68,7 @@ export function resetConfigCache() {
     cachedConfig = undefined;
 }
 export function loadUserConfig() {
+    assertNoPendingMigrationOperation();
     const configPath = getConfigPath();
     let stat;
     try {
@@ -91,12 +92,12 @@ export function loadUserConfig() {
     }
     let text;
     try {
-        text = fs.readFileSync(configPath, "utf8");
+        text = readConfigText(configPath);
     }
     catch (err) {
-        if (err.code !== "ENOENT") {
-            throw new ConfigError(`Unable to read config at ${configPath}: ${err instanceof Error ? err.message : String(err)}`, "INVALID_CONFIG_FILE");
-        }
+        throw new ConfigError(`Unable to read config at ${configPath}: ${err instanceof Error ? err.message : String(err)}`, "INVALID_CONFIG_FILE");
+    }
+    if (text === undefined) {
         cachedConfig = undefined;
         return { ...DEFAULT_CONFIG };
     }
@@ -191,13 +192,14 @@ export function saveConfig(config) {
     saveConfigReal(currentConfig);
 }
 function saveConfigReal(config) {
+    assertNoPendingMigrationOperation();
     cachedConfig = undefined;
     const configPath = getConfigPath();
     const dir = path.dirname(configPath);
     fs.mkdirSync(dir, { recursive: true });
     withConfigLock(() => {
+        assertNoPendingMigrationOperation();
         const validated = validateCompleteConfig(config);
-        ensureMigrationBackupWithConfigLockHeld();
         backupExistingConfig(configPath);
         writeConfigAtomic(configPath, sanitizeConfigForWrite(validated));
     });
@@ -212,12 +214,14 @@ export function validateCompleteConfig(config) {
 }
 /**
  * Mutate config under one fail-closed lock spanning read, merge, validation,
- * migration backup, ordinary backup, and atomic write.
+ * ordinary backup, and atomic write.
  */
 export function mutateConfig(mutate, options) {
+    assertNoPendingMigrationOperation();
     cachedConfig = undefined;
     const configPath = getConfigPath();
     return withConfigLock(() => {
+        assertNoPendingMigrationOperation();
         const text = readConfigText(configPath);
         if (text === undefined && options?.absentNoop) {
             return { config: { ...DEFAULT_CONFIG }, written: false };
@@ -227,7 +231,6 @@ export function mutateConfig(mutate, options) {
         if (mutated === current)
             return { config: current, written: false };
         const next = validateCompleteConfig({ ...mutated, configVersion: CURRENT_CONFIG_VERSION });
-        ensureMigrationBackupWithConfigLockHeld();
         if (text !== undefined)
             backupExistingConfig(configPath);
         fs.mkdirSync(path.dirname(configPath), { recursive: true });
@@ -241,18 +244,16 @@ export function mutateConfig(mutate, options) {
  * its stash, while preventing another config writer from racing the final save.
  */
 export async function mutateConfigWithPrecommit(mutate, precommit) {
+    assertNoPendingMigrationOperation();
     cachedConfig = undefined;
     const configPath = getConfigPath();
     const release = acquireConfigLock();
     try {
+        assertNoPendingMigrationOperation();
         const text = readConfigText(configPath);
         const current = text === undefined ? { ...DEFAULT_CONFIG } : parseAndValidateConfigText(text, configPath);
         const mutated = mutate(current);
         const next = validateCompleteConfig({ ...mutated, configVersion: CURRENT_CONFIG_VERSION });
-        // Setup's pre-commit may initialize the stash. Prove the rebase and final
-        // config are valid, then require the recovery snapshots before that first
-        // external side effect.
-        ensureMigrationBackupWithConfigLockHeld();
         if (text !== undefined)
             backupExistingConfig(configPath);
         const precommitResult = await precommit(next);
@@ -281,7 +282,7 @@ export async function mutateConfigWithPrecommit(mutate, precommit) {
  * --yes` with an `apiKey` field expected persistence and got a wiped config
  * with no feedback.
  */
-function sanitizeConfigForWrite(config) {
+export function sanitizeConfigForWrite(config) {
     const sanitized = { ...config };
     const stripped = [];
     if (config.embedding?.apiKey !== undefined) {

package/dist/core/file-lock.js

@@ -5,7 +5,7 @@ import { randomUUID } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { openDatabase } from "../storage/database.js";
-import { isProcessAlive } from "./common.js";
+import { isProcessAlive, MAX_LOCK_METADATA_BYTES, readTextFileDescriptorWithLimit } from "./common.js";
 function readLockSnapshot(lockPath) {
     let fd;
     try {
@@ -17,7 +17,7 @@ function readLockSnapshot(lockPath) {
         throw err;
     }
     try {
-        const rawContent = fs.readFileSync(fd, "utf8");
+        const rawContent = readTextFileDescriptorWithLimit(fd, MAX_LOCK_METADATA_BYTES, "Lock metadata", lockPath);
         const stat = fs.fstatSync(fd);
         return {
             rawContent,