akm-cli 0.9.0-rc.3 → 0.9.0-rc.5

package/CHANGELOG.md

@@ -350,6 +350,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ### Fixed
 
+- **Improve RC stabilization.** Restored one ownership-safe whole-run lock from
+  triage through final sync; `--skip-if-locked` is a true no-op; the run deadline
+  now starts before indexing and reaches index waits, generation, reindexing, and
+  quality judges; reflect judges the sanitized final candidate with bounded
+  changed-region context; write-target selectors no longer replace durable source
+  identity; and vLLM thinking controls cannot be overridden through `extraParams`.
 - **Proposal promotion, reversion, and rejection are durable and recoverable.**
   Acceptance and reversion persist target ownership and content fingerprints,
   publish atomically across filesystem layouts, index immediately, commit exact
@@ -1234,14 +1240,16 @@ proposal and log storage, `--format html` output, and per-stage LLM telemetry.
 
 ### Added
 
-- **Cross-runtime: akm now runs on Node.js (≥ 20) in addition to Bun** (#560,
+- **Cross-runtime: akm now runs on Node.js >= 20.12 in addition to Bun** (#560,
   #465). A two-file runtime boundary (`src/storage/database.ts` owns SQLite via
   `bun:sqlite` on Bun / `better-sqlite3` on Node; `src/runtime.ts` owns every
   `Bun.*` API) contains all runtime-specific code, enforced by a lint guard so it
   cannot leak back out. A CI `node-smoke` matrix runs the built CLI under Node
-  20 and 22. **Minimum Node is 20** — the prompts dependency (`@clack/core`) uses
-  `node:util.styleText`, added in Node 20.12; Node 18 is EOL and unsupported.
-  Bun remains the primary/default runtime.
+  20 and 22. The prompts dependency (`@clack/core`) uses `node:util.styleText`,
+  added in Node 20.12; Node 18 is EOL and unsupported. The npm package uses Node
+  as its bootstrap and prefers a working Bun >= 1.0 for execution when both are
+  available. Old, unusable, or absent Bun installations fall back to Node.js;
+  standalone binaries remain runtime-free.
 - **`session` asset type — agent sessions are now searchable** (#561). The
   `extract` pass, after distilling memory proposals from a session, additionally
   writes the session itself as a first-class `session` asset

package/README.md

@@ -24,13 +24,7 @@ curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh |
 irm https://github.com/itlackey/akm/releases/latest/download/install.ps1 | iex
 ```
 
-**Option 2 — Bun (requires [Bun](https://bun.sh) >= 1.0):**
-
-```sh
-bun install -g akm-cli
-```
-
-**Option 3 — Node.js (requires Node.js >= 20.12):**
+**Option 2 — npm package (requires [Node.js](https://nodejs.org) >= 20.12):**
 
 ```sh
 npm install -g akm-cli
@@ -38,7 +32,12 @@ npm install -g akm-cli
 
 Upgrade in place with `akm upgrade`.
 
-> **AKM 0.9.0 supports three install paths:** prebuilt binary, Bun, or Node.js >= 20.12.
+The npm package always uses Node.js to bootstrap its cross-platform command.
+If a working [Bun](https://bun.sh) >= 1.0 is also on `PATH`, the launcher
+prefers Bun for execution; old, unusable, or absent Bun installations fall back
+to Node.js. Node.js remains required for the npm package. The standalone
+binaries are runtime-free.
+
 > The old `vault` asset type was removed in 0.9.0; use `env` for whole `.env`
 > groups and `secret` for standalone sensitive values.
 

package/SECURITY.md

@@ -82,9 +82,11 @@ containing secrets or private notes.
 
 ## Known non-issues
 
-- **`akm` requires Bun, Node.js >= 20.12, or the prebuilt binary.** Older
-  Node.js versions are unsupported because required runtime APIs are missing.
-  This is a compatibility limitation, not a security risk.
+- **The `akm-cli` npm package requires Node.js >= 20.12 as its bootstrap.** A
+  working Bun >= 1.0 is preferred for execution when it is also on `PATH`; old,
+  unusable, or absent Bun installations fall back to Node.js. Bun does not
+  remove the package's Node.js requirement. Standalone binaries are
+  runtime-free. This is a compatibility limitation, not a security risk.
 - **Workflows can read any file the akm process can read.** This is not a
   bug — see "Threat model" above.
 - **Installing `akm-cli` runs the preinstall hook.** The hook only validates

package/dist/akm

@@ -1,38 +1,49 @@
-#!/bin/sh
-# This Source Code Form is subject to the terms of the Mozilla Public
-# License, v. 2.0. If a copy of the MPL was not distributed with this
-# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+#!/usr/bin/env node
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
-case "$0" in
-	*/*) SCRIPT_PATH=$0 ;;
-	*)
-		SCRIPT_PATH=$(command -v -- "$0" 2>/dev/null || true)
-		if [ -z "$SCRIPT_PATH" ]; then
-			echo "akm launcher could not resolve its own path." >&2
-			exit 127
-		fi
-		;;
-esac
+import { spawn, spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
 
-if command -v readlink >/dev/null 2>&1; then
-	while [ -L "$SCRIPT_PATH" ]; do
-		LINK_TARGET=$(readlink "$SCRIPT_PATH")
-		case "$LINK_TARGET" in
-			/*) SCRIPT_PATH=$LINK_TARGET ;;
-			*) SCRIPT_PATH=${SCRIPT_PATH%/*}/$LINK_TARGET ;;
-		esac
-	done
-fi
+if (!process.versions.bun) {
+  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
+  if (major < 20 || (major === 20 && minor < 12)) {
+    console.error("The akm-cli npm package requires Node.js >= 20.12 to bootstrap.");
+    process.exit(1);
+  }
+}
 
-SCRIPT_DIR=$(CDPATH= cd -- "${SCRIPT_PATH%/*}" && pwd)
+const bunProbe = process.versions.bun
+  ? { status: 0, stdout: process.versions.bun }
+  : spawnSync("bun", ["--version"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 5_000,
+    });
+const [bunMajor = 0] = (bunProbe.status === 0 ? bunProbe.stdout.trim() : "").split(".").map(Number);
+const useBun = bunMajor >= 1;
+const bunEntry = fileURLToPath(new URL("./cli.js", import.meta.url));
+const nodeEntry = fileURLToPath(new URL("./cli-node.mjs", import.meta.url));
 
-if command -v bun >/dev/null 2>&1; then
-	exec bun "$SCRIPT_DIR/cli.js" "$@"
-fi
+if (!useBun && !process.versions.bun) {
+  await import("./cli-node.mjs");
+} else {
+  const command = useBun ? (process.versions.bun ? process.execPath : "bun") : "node";
+  const entry = useBun ? bunEntry : nodeEntry;
+  const runtime = useBun ? "Bun" : "Node.js";
+  const result = await new Promise((resolve) => {
+    const child = spawn(command, [entry, ...process.argv.slice(2)], { stdio: "inherit" });
+    child.once("error", (error) => resolve({ error }));
+    child.once("exit", (code, signal) => resolve({ code, signal }));
+  });
 
-if command -v node >/dev/null 2>&1; then
-	exec node "$SCRIPT_DIR/cli-node.mjs" "$@"
-fi
-
-echo "akm requires Bun or Node.js >= 20.12.0 on PATH." >&2
-exit 127
+  if (result.error) {
+    console.error(`akm launcher could not start ${runtime}: ${result.error.message}`);
+    process.exitCode = 127;
+  } else if (result.signal) {
+    process.kill(process.pid, result.signal);
+  } else {
+    process.exitCode = result.code ?? 1;
+  }
+}

package/dist/akm-migrate-storage

@@ -1,38 +1,49 @@
-#!/bin/sh
-# This Source Code Form is subject to the terms of the Mozilla Public
-# License, v. 2.0. If a copy of the MPL was not distributed with this
-# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+#!/usr/bin/env node
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
-case "$0" in
-	*/*) SCRIPT_PATH=$0 ;;
-	*)
-		SCRIPT_PATH=$(command -v -- "$0" 2>/dev/null || true)
-		if [ -z "$SCRIPT_PATH" ]; then
-			echo "akm-migrate-storage launcher could not resolve its own path." >&2
-			exit 127
-		fi
-		;;
-esac
+import { spawn, spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
 
-if command -v readlink >/dev/null 2>&1; then
-	while [ -L "$SCRIPT_PATH" ]; do
-		LINK_TARGET=$(readlink "$SCRIPT_PATH")
-		case "$LINK_TARGET" in
-			/*) SCRIPT_PATH=$LINK_TARGET ;;
-			*) SCRIPT_PATH=${SCRIPT_PATH%/*}/$LINK_TARGET ;;
-		esac
-	done
-fi
+if (!process.versions.bun) {
+  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
+  if (major < 20 || (major === 20 && minor < 12)) {
+    console.error("The akm-cli npm package requires Node.js >= 20.12 to bootstrap.");
+    process.exit(1);
+  }
+}
 
-SCRIPT_DIR=$(CDPATH= cd -- "${SCRIPT_PATH%/*}" && pwd)
+const bunProbe = process.versions.bun
+  ? { status: 0, stdout: process.versions.bun }
+  : spawnSync("bun", ["--version"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 5_000,
+    });
+const [bunMajor = 0] = (bunProbe.status === 0 ? bunProbe.stdout.trim() : "").split(".").map(Number);
+const useBun = bunMajor >= 1;
+const bunEntry = fileURLToPath(new URL("./scripts/migrate-storage.js", import.meta.url));
+const nodeEntry = fileURLToPath(new URL("./migrate-storage-node.mjs", import.meta.url));
 
-if command -v bun >/dev/null 2>&1; then
-	exec bun "$SCRIPT_DIR/scripts/migrate-storage.js" "$@"
-fi
+if (!useBun && !process.versions.bun) {
+  await import("./migrate-storage-node.mjs");
+} else {
+  const command = useBun ? (process.versions.bun ? process.execPath : "bun") : "node";
+  const entry = useBun ? bunEntry : nodeEntry;
+  const runtime = useBun ? "Bun" : "Node.js";
+  const result = await new Promise((resolve) => {
+    const child = spawn(command, [entry, ...process.argv.slice(2)], { stdio: "inherit" });
+    child.once("error", (error) => resolve({ error }));
+    child.once("exit", (code, signal) => resolve({ code, signal }));
+  });
 
-if command -v node >/dev/null 2>&1; then
-	exec node "$SCRIPT_DIR/migrate-storage-node.mjs" "$@"
-fi
-
-echo "akm-migrate-storage requires Bun or Node.js >= 20.12.0 on PATH." >&2
-exit 127
+  if (result.error) {
+    console.error(`akm-migrate-storage launcher could not start ${runtime}: ${result.error.message}`);
+    process.exitCode = 127;
+  } else if (result.signal) {
+    process.kill(process.pid, result.signal);
+  } else {
+    process.exitCode = result.code ?? 1;
+  }
+}

package/dist/assets/backends/schtasks-template.xml

@@ -3,6 +3,8 @@
   <RegistrationInfo>
     <Description>akm scheduled task: {{TASK_ID}}</Description>
     <URI>{{FOLDER}}{{TASK_ID}}</URI>
+    <Source>{{SIGNATURE}}</Source>
+    <Documentation>Log target (informational only; schtasks doesn't redirect): {{LOG_PATH}}</Documentation>
   </RegistrationInfo>
   <Triggers>
 {{TRIGGER_XML}}
@@ -25,5 +27,4 @@
       <Arguments>{{ARGS}}</Arguments>
     </Exec>
   </Actions>
-  <!-- Log target (informational only; schtasks doesn't redirect): {{LOG_PATH}} -->
 </Task>

package/dist/assets/help/help-improve.md

@@ -67,6 +67,9 @@ Options:
                         Only process refs with recent feedback signal events
   --min-retrieval-count <n>
                         Retrieval fallback threshold when no recent feedback exists (default: 5)
+  --timeout-ms <n>      Wall-clock budget for the entire live run (default: 7200000)
+  --skip-if-locked      Exit 0 without doing work when another improve run owns
+                        the whole-run lock; no triage, indexing, events, or sync
   --json-to-stdout      Emit the full JSON result on stdout (legacy behaviour).
                         (0.8.0+: full result is recorded in the improve_runs table of
                         state.db and stdout is empty; use --json-to-stdout for the prior

package/dist/cli.js

@@ -2,9 +2,10 @@
 // This Source Code Form is subject to the terms of the Mozilla Public
 // License, v. 2.0. If a copy of the MPL was not distributed with this
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
-// Runtime guard: akm-cli 0.9 runs on Bun (primary) and Node.js >= 20 (#465,
-// #560). The runtime boundary (src/runtime.ts, src/storage/database.ts) makes
-// the Node path additive. Under Node the CLI must be launched via the
+// Runtime guard: the akm-cli npm package bootstraps with Node.js >= 20.12
+// (#465, #560), then its launcher prefers a working Bun >= 1.0 when available.
+// The runtime boundary (src/runtime.ts, src/storage/database.ts) supports both.
+// Under Node the CLI must be launched via the
 // `dist/cli-node.mjs` wrapper, which registers the text-import loader hook
 // before this module graph loads; running `node dist/cli.js` directly still
 // works for code paths that touch no embedded text asset, but the wrapper is
@@ -18,12 +19,11 @@
             .map((part) => Number.parseInt(part, 10) || 0);
         const nodeOk = major > 20 || (major === 20 && (minor > 12 || (minor === 12 && patch >= 0)));
         if (!nodeOk) {
-            console.error("\n  ERROR: akm-cli requires the Bun runtime (https://bun.sh) or Node.js >= 20.12.\n" +
+            console.error("\n  ERROR: the akm-cli npm package requires Node.js >= 20.12.\n" +
                 `  Detected Node.js ${process.versions.node ?? "unknown"}.\n` +
-                "  Install options:\n" +
-                "    1. Bun:    curl -fsSL https://bun.sh/install | bash  &&  bun install -g akm-cli\n" +
-                "    2. Node:   upgrade to Node.js 20.12 or newer (https://nodejs.org)\n" +
-                "    3. Binary: curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\n");
+                "  Bun >= 1.0 is optional for execution; it does not replace the Node.js bootstrap.\n" +
+                "  Upgrade Node.js (https://nodejs.org), or install the runtime-free standalone binary:\n" +
+                "    curl -fsSL https://github.com/itlackey/akm/releases/latest/download/install.sh | bash\n");
             process.exit(1);
         }
     }
@@ -60,7 +60,7 @@ process.on("uncaughtException", (err) => {
 import fs from "node:fs";
 import path from "node:path";
 import { defineCommand, runMain } from "citty";
-import { findCittyTopLevelCommand } from "./cli/parse-args.js";
+import { findCittyTopLevelCommand, findCittyTopLevelCommandIndex } from "./cli/parse-args.js";
 import { EXIT_CODES, emitJsonError, output, parseAllFlagValues, runWithJsonErrors } from "./cli/shared.js";
 import { agentCommand, lintCommand, proposeCommand } from "./commands/agent/contribute-cli.js";
 import { backupCommand } from "./commands/backup-cli.js";
@@ -93,6 +93,7 @@ import { workflowCommand } from "./commands/workflow-cli.js";
 import { bestEffort } from "./core/best-effort.js";
 import { DEFAULT_CONFIG, loadConfig } from "./core/config/config.js";
 import { UsageError } from "./core/errors.js";
+import { assertNoPendingMigrationOperation } from "./core/migration-operation.js";
 import { getCacheDir, getConfigPath, getDbPath } from "./core/paths.js";
 import { plainize } from "./core/tty.js";
 import { info, isQuiet, setQuiet, setVerbose, warn } from "./core/warn.js";
@@ -541,14 +542,26 @@ export const main = defineCommand({
     },
 });
 const MAIN_TOP_LEVEL_ARGS = main.args;
+function isTaskRunWithId(argv) {
+    const args = argv.slice(2);
+    const commandIndex = findCittyTopLevelCommandIndex(args, MAIN_TOP_LEVEL_ARGS);
+    const command = commandIndex >= 0 ? args[commandIndex] : undefined;
+    if (command !== "tasks" && command !== "task")
+        return false;
+    const taskArgs = args.slice(commandIndex + 1);
+    return taskArgs[0] === "run" && typeof taskArgs[1] === "string" && !taskArgs[1].startsWith("-");
+}
 /** Recovery/setup surfaces must remain reachable when config.json is invalid. */
 export function shouldBypassConfigStartup(argv) {
     const args = argv.slice(2);
     if (args.includes("--help") || args.includes("-h") || args.includes("--version") || args.includes("-v"))
         return true;
-    const command = findCittyTopLevelCommand([...args], MAIN_TOP_LEVEL_ARGS);
+    const commandIndex = findCittyTopLevelCommandIndex(args, MAIN_TOP_LEVEL_ARGS);
+    const command = commandIndex >= 0 ? args[commandIndex] : undefined;
     if (command === "setup" || command === "backup" || command === "migrate")
         return true;
+    if (isTaskRunWithId(argv))
+        return true;
     if (command !== "config")
         return false;
     const configIndex = args.indexOf("config");
@@ -584,6 +597,8 @@ if (import.meta.main || process.env.AKM_NODE_ENTRY === "1") {
     // rather than letting the raw exception escape with a stack trace.
     try {
         applyEarlyStderrFlags(process.argv);
+        if (isTaskRunWithId(process.argv))
+            assertNoPendingMigrationOperation();
         const bypassConfig = shouldBypassConfigStartup(process.argv);
         initOutputMode(process.argv, bypassConfig ? (DEFAULT_CONFIG.output ?? {}) : (loadConfig().output ?? {}));
     }

package/dist/commands/health/html-report.js

@@ -92,6 +92,8 @@ function reshapeRun(r) {
     const geMs = ge.durationMs || 0;
     return {
         id: r.id,
+        resultStatus: r.resultStatus ?? "valid",
+        resultComplete: r.resultComplete ?? (r.resultStatus === undefined || r.resultStatus === "valid"),
         taskId: r.taskId ?? "manual",
         strategy: r.strategy,
         legacyProfile: r.legacyProfile,
@@ -262,7 +264,10 @@ function buildEchartsTag(opts) {
  */
 export function buildHealthHtmlReplacements(result, opts) {
     const deltas = opts.deltas ?? {};
-    const runs = (result.runs ?? []).map(reshapeRun).sort((a, b) => a.startedAt.localeCompare(b.startedAt));
+    const compareRuns = (a, b) => a.startedAt.localeCompare(b.startedAt) || a.completedAt.localeCompare(b.completedAt) || a.id.localeCompare(b.id);
+    const allRuns = (result.runs ?? []).map(reshapeRun).sort(compareRuns);
+    const invalidRuns = allRuns.filter((run) => run.resultStatus === "invalid");
+    const runs = allRuns.filter((run) => run.resultStatus !== "invalid");
     const improve = result.improve;
     const proposals = opts.proposals;
     const sem = readSemSearch(result.advisories);
@@ -320,7 +325,10 @@ export function buildHealthHtmlReplacements(result, opts) {
     const reportTitle = reportDate ? `AKM Health Report — ${reportDate}` : "AKM Health Report";
     const lastRun = runs[runs.length - 1];
     const generatedAt = lastRun ? lastRun.completedAt || lastRun.startedAt || sinceIso : sinceIso;
-    const latest = [...runs].reverse().find((r) => r.ok) ?? lastRun;
+    const latest = [...runs]
+        .filter((run) => run.resultComplete)
+        .sort(compareRuns)
+        .at(-1);
     // Freshness: surface the newest run's timestamp + the generated-at anchor in
     // the exec card. Staleness is computed deterministically (no Date.now()) from
     // the gap between the window start (`since`) and the newest run we have: if no
@@ -389,6 +397,9 @@ export function buildHealthHtmlReplacements(result, opts) {
         li("Report window", esc(opts.window)),
         li("Compare window", esc(opts.compare)),
         li("Runs", `${num(totalRuns)} (${failedRuns} failed)`),
+        li("Included result rows", num(improve.resultRows?.included ?? totalRuns)),
+        li("Normalized result rows", num(improve.resultRows?.normalized ?? 0)),
+        li("Invalid result rows skipped", num(improve.resultRows?.skipped.invalid ?? invalidRuns.length)),
         li("Stash derived", `<abbr title="Whole-stash recount of derived assets at report time — not a per-run sum.">${num(improve.memorySummary.derived)}</abbr>`),
         li("Stash eligible", `<abbr title="Whole-stash recount of eligible assets at report time — not a per-run sum.">${num(improve.memorySummary.eligible)}</abbr>`),
         li("Pending proposals", String(proposals.length)),
@@ -655,6 +666,16 @@ export function buildHealthHtmlReplacements(result, opts) {
         seen.add(item.key);
         items.push(item);
     };
+    if (invalidRuns.length > 0) {
+        pushItem({
+            key: "invalid-improve-result-rows",
+            prio: "P2",
+            cls: "warn",
+            title: `${invalidRuns.length} invalid improve result row${invalidRuns.length === 1 ? "" : "s"} skipped`,
+            descHtml: `Excluded from result-derived metrics: ${invalidRuns.map((run) => `<code>${esc(run.id)}</code>`).join(", ")}.`,
+            remedy: `akm health --since=${opts.window} --group-by run`,
+        });
+    }
     // Hard advisories from the health check engine (own remediation in message).
     for (const a of result.advisories) {
         if (a.status !== "warn" && a.status !== "fail")

package/dist/commands/health/improve-metrics.js

@@ -25,6 +25,7 @@ function createUnknownImproveMetrics() {
         completed: 0,
         skipped: 0,
         skipReasons: {},
+        resultRows: { total: 0, included: 0, normalized: 0, skipped: { invalid: 0 } },
         plannedRefs: 0,
         strategyFilteredRefs: 0,
         actions: {
@@ -605,6 +606,15 @@ function mergeImproveMetrics(dst, src) {
     // totalAssets is intentionally NOT merged here — set from the most recent run in summarizeImproveRuns.
     dst.coverage.acceptedProposals += src.coverage.acceptedProposals;
 }
+function compareImproveRunRecency(a, b) {
+    const started = a.started_at.localeCompare(b.started_at);
+    if (started !== 0)
+        return started;
+    const completed = (a.completed_at ?? "").localeCompare(b.completed_at ?? "");
+    if (completed !== 0)
+        return completed;
+    return a.id.localeCompare(b.id);
+}
 export function summarizeImproveRuns(db, since, until) {
     const accum = createUnknownImproveMetrics();
     const rows = queryImproveRuns(db, since, until);
@@ -618,16 +628,33 @@ export function summarizeImproveRuns(db, since, until) {
     };
     // memorySummary is a whole-stash snapshot per run, so the window value is the
     // MOST RECENT run's snapshot (current state) — not a sum across runs.
-    let latestStartMs = Number.NEGATIVE_INFINITY;
+    let latestCompleteRow;
     let latestMemorySummary;
     let latestStrategyFilteredRefs = 0;
+    if (!accum.resultRows)
+        throw new Error("invariant: improve result-row accounting was not initialized");
+    accum.resultRows.total = rows.length;
     for (const row of rows) {
-        const result = decodeImproveResult(row.result_json).envelope;
+        let decoded;
+        try {
+            decoded = decodeImproveResult(row.result_json);
+        }
+        catch {
+            accum.resultRows.skipped.invalid += 1;
+            continue;
+        }
+        accum.resultRows.included += 1;
+        if (decoded.normalizedLegacyPartial)
+            accum.resultRows.normalized += 1;
+        const result = decoded.envelope;
         const perRow = projectRunMetrics(result);
         mergeImproveMetrics(accum, perRow);
         const startMs = new Date(row.started_at).getTime();
-        if (Number.isFinite(startMs) && startMs >= latestStartMs) {
-            latestStartMs = startMs;
+        if (!decoded.normalizedLegacyPartial &&
+            result.terminated === undefined &&
+            Number.isFinite(startMs) &&
+            (latestCompleteRow === undefined || compareImproveRunRecency(row, latestCompleteRow) > 0)) {
+            latestCompleteRow = row;
             latestMemorySummary = perRow.memorySummary;
             latestStrategyFilteredRefs = perRow.strategyFilteredRefs;
         }
@@ -681,8 +708,18 @@ export function summarizePhaseDurations(samples) {
  * Used by `akm health --detail per-run`.
  */
 export function projectImproveRunSummary(row, wallTimeMs, taskId) {
-    const decoded = decodeImproveResult(row.result_json);
-    const result = decoded.envelope;
+    let result = {};
+    let resultStatus = "invalid";
+    try {
+        const decoded = decodeImproveResult(row.result_json);
+        result = decoded.envelope;
+        resultStatus = decoded.normalizedLegacyPartial ? "normalized" : "valid";
+    }
+    catch {
+        // Keep the persisted row visible in per-run output, but do not project its
+        // unknown payload or admit its duration to result-derived denominators.
+        wallTimeMs = 0;
+    }
     const perRow = projectRunMetrics(result);
     finalizeImproveMetrics(perRow);
     const orphansPurged = toFiniteNumber(result.orphansPurged);
@@ -695,6 +732,8 @@ export function projectImproveRunSummary(row, wallTimeMs, taskId) {
         completedAt: row.completed_at,
         wallTimeMs,
         ok: row.ok === 1,
+        resultStatus,
+        resultComplete: resultStatus === "valid" && result.terminated === undefined,
         strategy: row.strategy,
         legacyProfile: row.legacyProfile,
         scope: {

package/dist/commands/health/md-report.js

@@ -38,6 +38,7 @@ export function renderRunsDetailMd(runs) {
         "graph_f/e/r",
         "orphans",
         "lint_f/fl",
+        "result_status",
     ];
     const rows = runs.map((r) => {
         const totalActions = r.actions.reflect.ok +
@@ -66,6 +67,7 @@ export function renderRunsDetailMd(runs) {
             `${r.graphExtraction.extractedFiles}/${r.graphExtraction.entities}/${r.graphExtraction.relations}`,
             String(r.orphansPurged),
             `${r.lintFixed}/${r.lintFlagged}`,
+            r.resultStatus ?? "valid",
         ];
     });
     return renderTable(headers, rows);
@@ -89,7 +91,14 @@ export function renderWindowCompareMd(windows, deltas) {
         "improve.memoryInference.skippedNoFacts",
     ]);
     const rows = [];
-    for (const path of INTERESTING_DELTA_PATHS) {
+    const paths = [
+        "runs",
+        "improve.resultRows.included",
+        "improve.resultRows.normalized",
+        "improve.resultRows.skipped.invalid",
+        ...INTERESTING_DELTA_PATHS,
+    ];
+    for (const path of paths) {
         const values = windows.map((w) => String(readNumericPath(w, path)));
         const delta = deltas?.[path];
         let deltaStr = "—";

package/dist/commands/health/windows.js

@@ -146,7 +146,7 @@ export function buildWindowMetrics(db, stateDbPath, since, until, now = () => Da
     });
     const { withLogs: taskRowsWithLogs, backed: existingLogRows } = partitionLogBackedRows(taskRows, logsDb);
     const failedTaskRows = taskRows.filter((row) => row.status === "failed");
-    const activeRows = taskRows.filter((row) => row.status === "active");
+    const activeRows = taskRows.filter((row) => row.status === "active" && row.completed_at === null);
     const stuckActiveRuns = activeRows.filter((row) => now() - new Date(row.started_at).getTime() > ACTIVE_RUN_WARN_MS).length;
     const promptRows = taskRows.filter((row) => row.target_kind === "prompt");
     const promptFailures = promptRows.filter((row) => {

package/dist/commands/health.js

@@ -94,7 +94,7 @@ export function akmHealth(options = {}) {
         const taskRows = queryTaskHistory(db, { since });
         const { withLogs: taskRowsWithLogs, backed: existingLogRows } = partitionLogBackedRows(taskRows, logsDb);
         const failedTaskRows = taskRows.filter((row) => row.status === "failed");
-        const activeRows = taskRows.filter((row) => row.status === "active");
+        const activeRows = taskRows.filter((row) => row.status === "active" && row.completed_at === null);
         const stuckActiveRuns = activeRows.filter((row) => now() - new Date(row.started_at).getTime() > ACTIVE_RUN_WARN_MS).length;
         const promptRows = taskRows.filter((row) => row.target_kind === "prompt");
         const promptFailures = promptRows.filter((row) => {

package/dist/commands/improve/distill/promote-memory.js

@@ -83,7 +83,7 @@ export async function promoteMemoryToKnowledge(ctx) {
             const mergeResponse = await chat(ctx.llmConfig, [
                 { role: "system", content: "Return only valid JSON. No prose." },
                 { role: "user", content: mergePrompt },
-            ]);
+            ], ctx.signal ? { signal: ctx.signal } : undefined);
             const mergeResult = parseEmbeddedJsonResponse(mergeResponse);
             if (mergeResult?.action === "NOOP") {
                 // Existing content is authoritative — no update needed.
@@ -139,7 +139,11 @@ export async function promoteMemoryToKnowledge(ctx) {
     if (ctx.strategy?.processes?.distill?.qualityGate?.enabled ?? true) {
         // D-4 / #390: retrieve top-3 similar lessons for dedup check in judge.
         const similarLessons = await fetchSimilarLessonsFn(resolvedPromotionContent.slice(0, 500), 3);
-        const judgeResult = await runLessonQualityJudge(config, resolvedPromotionContent, assetContent ?? "", chat, similarLessons.length > 0 ? similarLessons : undefined, ctx.llmConfig);
+        const judgeResult = await runLessonQualityJudge(config, resolvedPromotionContent, assetContent ?? "", chat, {
+            ...(similarLessons.length > 0 ? { similarLessons } : {}),
+            ...(ctx.llmConfig ? { llmConfig: ctx.llmConfig } : {}),
+            ...(ctx.signal ? { signal: ctx.signal } : {}),
+        });
         if (!judgeResult.pass) {
             if (judgeResult.reviewNeeded) {
                 // Uncertainty band (2.5–3.5): queue as review_needed instead of rejecting.