akm-cli 0.9.0-rc.8 → 0.9.0

package/dist/core/config/config-sources.js

@@ -7,6 +7,18 @@
  * in an {@link AkmConfig}.
  */
 import { createHash } from "node:crypto";
+import path from "node:path";
+import { ConfigError } from "../errors.js";
+/** The current one-component-per-bundle configuration entry, if present. */
+export function bundleComponentConfig(bundle) {
+    if (!bundle?.components)
+        return undefined;
+    const components = Object.values(bundle.components);
+    if (components.length !== 1) {
+        throw new ConfigError("A bundle components map must contain exactly one component.", "INVALID_CONFIG_FILE");
+    }
+    return components[0];
+}
 /**
  * Convert a `bundles` map (0.9.0 config-shape cutover, spec §10.1 / D-R5) into
  * the ordered {@link SourceConfigEntry} list the transitional runtime source
@@ -28,7 +40,18 @@ export function primaryBundlePath(config) {
     if (!bundles || !key)
         return undefined;
     const entry = bundles[key];
-    return entry && typeof entry.path === "string" && entry.path.length > 0 ? entry.path : undefined;
+    if (!entry || typeof entry.path !== "string" || entry.path.length === 0)
+        return undefined;
+    const componentRoot = bundleComponentConfig(entry)?.root;
+    if (!componentRoot || componentRoot === ".")
+        return entry.path;
+    const bundleRoot = path.resolve(entry.path);
+    const resolved = path.resolve(bundleRoot, componentRoot);
+    const relative = path.relative(bundleRoot, resolved);
+    if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+        throw new ConfigError(`Component root "${componentRoot}" escapes bundle "${key}".`, "INVALID_CONFIG_FILE");
+    }
+    return resolved;
 }
 export function bundlesToSourceEntries(config) {
     const bundles = config.bundles;
@@ -50,13 +73,14 @@ export function bundleEntryToSourceEntry(key, bundle, isPrimary = false) {
     const base = {
         name: key,
         ...(bundle.writable !== undefined ? { writable: bundle.writable } : {}),
+        ...(bundle.enabled !== undefined ? { enabled: bundle.enabled } : {}),
         ...(isPrimary ? { primary: true } : {}),
     };
     if (typeof bundle.path === "string" && bundle.path.length > 0) {
         return { type: "filesystem", path: bundle.path, ...base };
     }
     if (typeof bundle.git === "string" && bundle.git.length > 0) {
-        return { type: "git", url: bundle.git, ...base };
+        return { type: "git", url: normalizeInstalledGitRef("", bundle.git), ...base };
     }
     if (bundle.website && typeof bundle.website.url === "string") {
         // All non-`url` website-descriptor keys (maxPages/refresh/maxDepth + any
@@ -79,20 +103,21 @@ export function bundleEntryToSourceEntry(key, bundle, isPrimary = false) {
 /**
  * Desired 0.9.0 bundle descriptor for a registry-installed source (spec §10.1).
  * Maps the install source kind onto the ONE source descriptor a bundle entry
- * carries: git/github → `{ git: ref }`, npm → `{ npm: ref }`, everything else
- * (local/filesystem) → `{ path: stashRoot }`.
+ * carries: git/github → a provider-ready clone URL, npm → `{ npm: ref }`,
+ * everything else (local/filesystem) → `{ path: stashRoot }`.
  *
  * CRITICAL (spec §10.2:453): the materialized cache root NEVER appears in the
  * descriptor for a git/npm bundle — the desired config carries only the source
- * LOCATOR (the re-installable ref); the resolved root belongs exclusively in the
- * lock's `localRoot`. Callers layer `registryId`/`writable` onto the result.
+ * descriptor; the install locator stays in `registryId` and the resolved root
+ * belongs exclusively in the lock's `localRoot`. Callers layer
+ * `registryId`/`writable` onto the result.
  */
 export function installedSourceDescriptor(source, ref, stashRoot) {
     switch (source) {
         case "git":
         case "github":
             if (ref)
-                return { git: ref };
+                return { git: normalizeInstalledGitRef(source, ref) };
             break;
         case "npm":
             if (ref)
@@ -105,6 +130,19 @@ export function installedSourceDescriptor(source, ref, stashRoot) {
     // cache to re-materialize), so the resolved root IS the desired path.
     return { path: stashRoot };
 }
+function normalizeInstalledGitRef(source, ref) {
+    if (ref.startsWith("git+"))
+        return ref.slice(4);
+    const isGithubShorthand = ref.startsWith("github:") || (source === "github" && /^[^/:#]+\/[^/#]+(?:#.+)?$/.test(ref));
+    if (!isGithubShorthand)
+        return ref;
+    const body = ref.startsWith("github:") ? ref.slice("github:".length) : ref;
+    const fragmentAt = body.indexOf("#");
+    const repository = fragmentAt >= 0 ? body.slice(0, fragmentAt) : body;
+    const requestedRef = fragmentAt >= 0 ? body.slice(fragmentAt + 1) : "";
+    const cloneUrl = `https://github.com/${repository.replace(/\.git$/i, "")}`;
+    return requestedRef ? `${cloneUrl}/tree/${requestedRef}` : cloneUrl;
+}
 /**
  * Synthesize a stable identifier when a {@link SourceConfigEntry} omits its
  * `name`. Uses a short hash of the discriminating fields so two equivalent
@@ -144,8 +182,7 @@ export function parseSourceSpec(entry) {
         case "npm":
             return entry.path ? { type: "npm", package: entry.path } : undefined;
         default:
-            // Unknown provider — best-effort fallback so callers still get something.
-            return entry.path ? { type: "filesystem", path: entry.path } : undefined;
+            return undefined;
     }
 }
 /**
@@ -166,8 +203,15 @@ export function resolveConfiguredSources(config) {
     const out = [];
     for (const persisted of bundleEntries) {
         const runtime = toConfiguredSource(persisted, persisted.primary === true);
-        if (runtime)
-            out.push(runtime);
+        if (runtime) {
+            const component = bundleComponentConfig(config.bundles?.[persisted.name ?? ""]);
+            out.push({
+                ...runtime,
+                ...(component?.adapter ? { adapterId: component.adapter } : {}),
+                ...(component?.root ? { componentRoot: component.root } : {}),
+                ...(component?.writable !== undefined ? { writable: component.writable } : {}),
+            });
+        }
     }
     return out;
 }

package/dist/core/config/config-walker.js

@@ -211,15 +211,14 @@ export function configSet(config, dotted, raw) {
         return undefined;
     }, config);
     const next = setPath(config, path, isPlainObject(existing) && isPlainObject(parsed.data) ? deepMergeConfig(existing, parsed.data) : parsed.data);
-    // Targeted invariant: defaultWriteTarget must point at a configured source
+    // Targeted invariant: defaultWriteTarget must point at a configured bundle
     // (#464.a). Whole-config validation happens at save time; this check fires
-    // at set time so the user sees the typo immediately. Empty-sources case is
-    // accepted here (legacy behaviour) — saveConfig will reject if it persists.
+    // at set time so the user sees the typo immediately.
     if (dotted === "defaultWriteTarget" && typeof value === "string") {
-        const sources = next.sources ?? [];
-        const knownNames = sources.map((s) => s.name).filter((n) => typeof n === "string" && n.length > 0);
-        if (knownNames.length > 0 && !knownNames.includes(value)) {
-            throw new UsageError(`Unknown source name "${value}" for defaultWriteTarget; configured source names: ${knownNames.map((n) => `"${n}"`).join(", ")}.`, "INVALID_FLAG_VALUE");
+        const bundles = next.bundles && typeof next.bundles === "object" ? next.bundles : {};
+        const knownNames = Object.keys(bundles);
+        if (!knownNames.includes(value)) {
+            throw new UsageError(`Unknown bundle "${value}" for defaultWriteTarget; configured bundles: ${knownNames.map((n) => `"${n}"`).join(", ") || "none"}.`, "INVALID_FLAG_VALUE");
         }
     }
     return next;
@@ -404,7 +403,24 @@ function unsetPath(config, path) {
     return next;
 }
 // ── Hint generation (#460) ──────────────────────────────────────────────────
-export function unknownKeyHint(_attempted) {
+/**
+ * Per-key "use X instead" guidance for config keys retired before the 0.9
+ * cutover, keyed on the first dotted-path segment. Mitigation item 3: the
+ * generic "valid top-level keys" hint doesn't tell a pre-0.9 user what
+ * replaced the key they typed — this does.
+ */
+const RETIRED_KEY_HINTS = {
+    stashDir: "stashDir was removed in 0.9; get the stash path from `akm config path --all` or `akm info`.",
+    sources: "sources was replaced by bundles in 0.9; run `akm-migrate apply` on a pre-0.9 config to convert it.",
+    installed: "installed was replaced by bundles in 0.9; run `akm-migrate apply` on a pre-0.9 config to convert it.",
+    wikiName: "the wiki subsystem was removed in 0.9; wikis are ordinary knowledge assets now — see `akm import`.",
+    wiki: "the wiki subsystem was removed in 0.9; wikis are ordinary knowledge assets now — see `akm import`.",
+    llm: "llm was replaced by named engines configuration in 0.9; configure `engines` instead.",
+};
+export function unknownKeyHint(attempted) {
     const keys = listTopLevelConfigKeys();
-    return `Valid top-level keys: ${keys.join(", ")}. Use dotted paths for nested values (e.g. embedding.endpoint, engines.<name>.model).`;
+    const generic = `Valid top-level keys: ${keys.join(", ")}. Use dotted paths for nested values (e.g. embedding.endpoint, engines.<name>.model).`;
+    const firstSegment = attempted.split(".")[0] ?? "";
+    const retiredHint = RETIRED_KEY_HINTS[firstSegment];
+    return retiredHint ? `${retiredHint} ${generic}` : generic;
 }

package/dist/core/config/config.js

@@ -58,7 +58,7 @@ export function resolveBatchSize(configured, contextLength) {
 // ── Defaults ────────────────────────────────────────────────────────────────
 export const DEFAULT_CONFIG = {
     configVersion: "0.9.0",
-    semanticSearchMode: "auto",
+    semanticSearchMode: "off",
     registries: [
         { url: "https://raw.githubusercontent.com/itlackey/akm-registry/main/index.json", name: "akm-registry" },
         { url: "https://skills.sh", name: "skills.sh", provider: "skills-sh", enabled: false },
@@ -69,7 +69,6 @@ export const DEFAULT_CONFIG = {
     },
 };
 // ── Load / Save / Update ────────────────────────────────────────────────────
-const PROJECT_CONFIG_RELATIVE_PATH = path.join(".akm", "config.json");
 let cachedConfig;
 export function resetConfigCache() {
     cachedConfig = undefined;
@@ -129,9 +128,8 @@ export function loadUserConfig() {
  * Parse raw config text and validate via Zod.
  * ({@link AkmConfigSchema}). Returns the merged-with-defaults AkmConfig.
  *
- * The migration handles all one-time 0.7→0.8 transforms (legacy keys,
- * boolean→string coercions, openviking rename); the schema then validates
- * the canonical shape and throws on anything it doesn't recognise.
+ * The schema accepts only the current config version and validates the
+ * canonical shape before defaults are merged.
  */
 export function parseAndValidateConfigText(text, sourcePath) {
     const raw = parseConfigText(text, sourcePath);
@@ -175,10 +173,6 @@ export function getImproveProcessConfig(processName, selected) {
     return selected?.processes?.[processName];
 }
 export function loadConfig() {
-    // Single-layer load: only the user-level config file is read. Project-level
-    // .akm/config.json files discovered under cwd-ancestors emit a one-time
-    // deprecation warning (#457) but are NOT merged.
-    warnIfProjectConfigPresent(process.cwd());
     return loadUserConfig();
 }
 export function saveConfig(config) {
@@ -265,7 +259,7 @@ export async function mutateConfigWithPrecommit(mutate, precommit) {
 /**
  * Strip literal apiKey fields before writing config to disk.
  * API keys are expected to come from environment variables
- * (AKM_EMBED_API_KEY, AKM_LLM_API_KEY, AKM_PROFILE_<NAME>_API_KEY).
+ * (AKM_EMBED_API_KEY, AKM_LLM_API_KEY, AKM_ENGINE_<NAME>_API_KEY).
  *
  * `${VAR}` / `$VAR` references are preserved — they are not secrets, they
  * are deferred lookups resolved at consumption by `resolveSecret`. Dropping
@@ -350,15 +344,14 @@ export function resolveSecret(value) {
 /**
  * Read a per-pass {@link IndexPassConfig} entry from {@link IndexConfig},
  * filtering out the reserved feature-section keys so callers don't mistake
- * `metadataEnhance` / `stalenessDetection` for a pass.
+ * `metadataEnhance` for a pass.
  */
 /**
  * Reserved well-known keys on IndexConfig that are NOT per-pass entries.
- * `stalenessDetection` is retired (10-Q3) but stays reserved so a leftover
- * config section is never misread as a pass entry. `indexBodyOpening`
- * (stash-conventions SPEC-8) is a boolean feature flag, not a pass section.
+ * `indexBodyOpening` (stash-conventions SPEC-8) is a boolean feature flag, not
+ * a pass section.
  */
-const INDEX_RESERVED_KEYS = new Set(["metadataEnhance", "stalenessDetection", "indexBodyOpening"]);
+const INDEX_RESERVED_KEYS = new Set(["metadataEnhance", "indexBodyOpening"]);
 export function getIndexPassConfig(config, passName) {
     if (!config)
         return undefined;
@@ -370,42 +363,10 @@ export function getIndexPassConfig(config, passName) {
     return entry;
 }
 // Re-export source runtime helpers — implementation lives in config-sources.ts.
-export { bundleEntryToSourceEntry, bundlesToSourceEntries, installedSourceDescriptor, parseSourceSpec, primaryBundlePath, resolveConfiguredSources, } from "./config-sources.js";
+export { bundleComponentConfig, bundleEntryToSourceEntry, bundlesToSourceEntries, installedSourceDescriptor, parseSourceSpec, primaryBundlePath, resolveConfiguredSources, } from "./config-sources.js";
 /**
  * Merge a partial user-config override onto a base config. Used by
  * {@link loadUserConfig} (DEFAULT_CONFIG + on-disk) and {@link updateConfig}
  * (current config + partial patch). Sub-objects with named records (profiles,
  * defaults, etc.) shallow-merge; arrays override wholesale.
  */
-/**
- * Walk cwd-ancestors looking for `.akm/config.json`. If one is found, emit a
- * one-time deprecation warning per path. The file's contents are NOT read —
- * multi-layer project config was removed in this release; the warning stays
- * for one cycle so users notice they have a now-dead file on disk and can
- * migrate its settings to the user-level config.
- */
-const PROJECT_CONFIG_DEPRECATION_WARNED = new Set();
-function warnIfProjectConfigPresent(startDir) {
-    let currentDir = path.resolve(startDir);
-    while (true) {
-        const configPath = path.join(currentDir, PROJECT_CONFIG_RELATIVE_PATH);
-        if (isFile(configPath) && !PROJECT_CONFIG_DEPRECATION_WARNED.has(configPath)) {
-            PROJECT_CONFIG_DEPRECATION_WARNED.add(configPath);
-            warn(`[akm] DEPRECATED: project-level config file found at ${configPath}. ` +
-                "Project-level config files are no longer merged (removed after 0.8.x deprecation). " +
-                "Move any needed settings to ~/.config/akm/config.json; this file is ignored.");
-        }
-        const parentDir = path.dirname(currentDir);
-        if (parentDir === currentDir)
-            break;
-        currentDir = parentDir;
-    }
-}
-function isFile(filePath) {
-    try {
-        return fs.statSync(filePath).isFile();
-    }
-    catch {
-        return false;
-    }
-}

package/dist/core/config/experimental.js

@@ -0,0 +1,21 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * True only when the user has explicitly opted into autonomous `akm improve`
+ * mutation.
+ *
+ * Accepts a partial config so callers holding a plain object (tests, the
+ * strategy resolver) do not need a fully-parsed one.
+ */
+export function isImproveAutonomyEnabled(config) {
+    return config?.experimental?.improveAutonomy === true;
+}
+/**
+ * The config key an operator sets to enable a gated lane.
+ *
+ * Named rather than inlined because it is user-facing text: it goes into the
+ * `improve_skipped` event metadata, the `akm task doctor` output, and the
+ * health advisory, and those three must name the same key as the schema.
+ */
+export const IMPROVE_AUTONOMY_CONFIG_KEY = "experimental.improveAutonomy";

package/dist/core/config/schema/embedding.js

@@ -27,7 +27,11 @@ export const EmbeddingConnectionConfigSchema = z
     endpoint: z.string().optional(),
     model: z.string().optional(),
     apiKey: z.string().regex(ENV_REFERENCE_PATTERN, `apiKey must be $VAR or \${VAR}`).optional(),
-    dimension: positiveInt.optional(),
+    // Bounded to the index schema's own vec-table guard (1–4096,
+    // storage/repositories/index-schema.ts) so an out-of-range dimension
+    // fails at config validation with a clear message instead of crashing
+    // `akm index` when ensureSchema rejects it (§24.2 "Semantic" gate).
+    dimension: positiveInt.max(4096).optional(),
     localModel: z.string().min(1).optional(),
     maxTokens: positiveInt.optional(),
     batchSize: positiveInt.optional(),

package/dist/core/config/schema/experimental.js

@@ -0,0 +1,30 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+/**
+ * `experimental` config section — explicit opt-ins for behaviour that is not
+ * covered by the stability contract (D8).
+ *
+ * An entry here exists so a user can turn something ON deliberately. Every key
+ * defaults to OFF, and the runtime must treat "absent" and "false" identically:
+ * autonomy is never inferred from a partially-written config.
+ */
+import { z } from "zod";
+export const ExperimentalConfigSchema = z
+    .object({
+    /**
+     * Allow `akm improve` to mutate assets without review.
+     *
+     * OFF by default. Gates memory-cleanup, memory-inference writes, and triage
+     * `applyMode: "promote"`. Consolidation stays enabled because destructive
+     * operations are advisory and promotion emits a reviewable proposal.
+     * `akm improve` itself stays on either way — what this gates is autonomy,
+     * not the feature.
+     *
+     * `sync.push` is deliberately NOT gated by this key: it publishes
+     * already-committed content to a remote the user configured for that
+     * purpose, and it has its own `sync.push: false` / `--no-push` controls.
+     */
+    improveAutonomy: z.boolean().optional(),
+})
+    .passthrough();

package/dist/core/config/schema/improve-processes.js

@@ -377,12 +377,6 @@ export const ImproveProfileConfigSchema = z
     description: z.string().min(1).optional(),
     processes: ImproveProfileProcessesSchema.optional(),
     limit: positiveInt.optional(),
-    // #614 — symmetric valence weighting in the eligibility sort. When true,
-    // the attention term becomes |valence| MAGNITUDE so BOTH strong positive
-    // and strong negative feedback drive attention (utility stays dominant) and
-    // strong-signed assets are routed to a fix/reinforce lane. DEFAULT OFF —
-    // false/absent preserves the legacy negative-only ranking byte-for-byte.
-    symmetricValence: z.boolean().optional(),
     sync: z
         .object({
         enabled: z.boolean().optional(),

package/dist/core/config/schema/improve.js

@@ -42,10 +42,13 @@ const ImproveSalienceSchema = z
     replayBudget: z.number().int().min(0).optional(),
 })
     .passthrough();
-// R5 — longitudinal collapse/churn detector (observe-only in v1; deterministic,
+// R5 — longitudinal collapse detector (observe-only; deterministic,
 // fail-open, runs only on cycles where consolidate did work).
 // Default ON; opt out via `improve.collapseDetector.enabled: false`.
 // See docs/architecture/specs/improve-collapse-churn-detector-design.md.
+// The design's CHURN alert class was removed (never fired in production —
+// its accepted-change-volume input was always a hardcoded 0), so this schema
+// no longer carries `churnMinAcceptedActions`.
 const ImproveCollapseDetectorSchema = z
     .object({
     enabled: z.boolean().optional(),
@@ -59,12 +62,26 @@ const ImproveCollapseDetectorSchema = z
     recallDropThreshold: z.number().min(0).max(1).optional(),
     // distinct-content-ratio decline over the window that fires collapse (default 0.05).
     entropyDropThreshold: z.number().min(0).max(1).optional(),
-    // Accepted-action volume over the window below which churn never fires (default 25).
-    churnMinAcceptedActions: z.number().int().min(1).optional(),
     // improve_cycle_metrics retention (default 365 days, owner-approved).
     retentionDays: z.number().int().min(1).optional(),
 })
     .passthrough();
+// #733 — orphan-GC pass (Workstream C, lean by design: one config gate).
+// The pass ALWAYS runs and ALWAYS reports counts (via the `asset_state_gc`
+// event); this gate controls ONLY whether it actually deletes rows whose
+// `missing_since` has been past the grace window (`STATE_GC_GRACE_MS`, 7
+// days — a named constant, not configurable) for longer than that window.
+const ImproveStateGcSchema = z
+    .object({
+    /**
+     * Actually DELETE `asset_salience` / `asset_outcome` rows once they have
+     * been unresolvable for longer than the grace window. Default false for
+     * 0.9.0: live data (the event's `pending` counts) proves the report
+     * clean before deletion is turned on.
+     */
+    collect: z.boolean().optional(),
+})
+    .passthrough();
 export const ImproveConfigSchema = z
     .object({
     strategies: z.record(engineName, ImproveProfileConfigSchema).optional(),
@@ -72,5 +89,6 @@ export const ImproveConfigSchema = z
     eventRetentionDays: nonNegativeNumber.optional(),
     salience: ImproveSalienceSchema.optional(),
     collapseDetector: ImproveCollapseDetectorSchema.optional(),
+    stateGc: ImproveStateGcSchema.optional(),
 })
     .passthrough();

package/dist/core/config/schema/index-config.js

@@ -87,19 +87,6 @@ export const IndexPassConfigSchema = z.preprocess((raw, ctx) => {
 })
     .passthrough());
 const MetadataEnhanceSchema = z.object({ enabled: z.boolean().optional() }).passthrough();
-/**
- * RETIRED (meta-review 10-Q3): the staleness-detect pass was deleted; nothing
- * reads this section anymore. The key stays TOLERATED here so configs that
- * still carry `index.stalenessDetection` (written by 0.8.x migrations) do not
- * fail validation — deleting the key would route it into the per-pass
- * catchall, which rejects its `enabled`/`thresholdDays` fields.
- */
-const StalenessDetectionSchema = z
-    .object({
-    enabled: z.boolean().optional(),
-    thresholdDays: positiveInt.optional(),
-})
-    .passthrough();
 const IndexDefaultsSchema = z
     .object({
     engine: engineName.optional(),
@@ -142,6 +129,13 @@ const IndexConfigRuntimeSchema = z.preprocess((raw, ctx) => {
     if (typeof raw !== "object")
         return raw;
     for (const [passName, value] of Object.entries(raw)) {
+        if (passName === "stalenessDetection") {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "Invalid `index.stalenessDetection`: the removed pass is not supported.",
+            });
+            return raw;
+        }
         if (passName === "indexBodyOpening") {
             if (typeof value !== "boolean") {
                 ctx.addIssue({
@@ -166,7 +160,6 @@ const IndexConfigRuntimeSchema = z.preprocess((raw, ctx) => {
     .object({
     defaults: IndexDefaultsSchema.optional(),
     metadataEnhance: MetadataEnhanceSchema.optional(),
-    stalenessDetection: StalenessDetectionSchema.optional(),
     indexBodyOpening: z
         .boolean()
         .optional()
@@ -174,7 +167,7 @@ const IndexConfigRuntimeSchema = z.preprocess((raw, ctx) => {
         "lowest-weight `content` search column and the embedding text (default false). Secret/env files " +
         "and session-kind memories are never captured. Toggling the flag changes indexed text: run " +
         "`akm index --full` afterwards to re-extract every entry and regenerate embeddings, and re-mint " +
-        "collapse-detector canary baselines via `akm improve canary --refresh`."),
+        "collapse-detector canary baselines via `bun scripts/refresh-canary-set.ts --refresh`."),
 })
     .catchall(IndexPassConfigSchema));
 // The runtime catchall correctly validates arbitrary pass objects, but its

package/dist/core/config/schema/output.js

@@ -9,7 +9,10 @@ import { z } from "zod";
 // ── Output ──────────────────────────────────────────────────────────────────
 export const OutputConfigSchema = z
     .object({
-    format: z.enum(["json", "yaml", "text"]).optional(),
+    // D7 — every `--format` value is a valid default, not just the three that
+    // predated universal md/html rendering. Kept in step with OUTPUT_FORMATS
+    // (`src/output/context.ts`).
+    format: z.enum(["json", "yaml", "text", "jsonl", "md", "html"]).optional(),
     detail: z.enum(["brief", "normal", "full"]).optional(),
 })
     .passthrough();

package/dist/core/config/schema/setup.js

@@ -7,21 +7,12 @@
  */
 import { z } from "zod";
 // ── Setup-derived recommendations ──────────────────────────────────────────
-/**
- * Cron-style schedule hints derived by `akm setup --reset-recommended`.
- *
- * These record the *recommended* cadence for the improve and index background
- * tasks. They are advisory metadata persisted into config so the value
- * survives a re-run; actual task scheduling lives in the tasks subsystem.
- */
-export const SetupTaskSchedulesSchema = z
-    .object({
-    improve: z.string().min(1).optional(),
-    index: z.string().min(1).optional(),
-})
-    .passthrough();
-export const SetupConfigSchema = z
-    .object({
-    taskSchedules: SetupTaskSchedulesSchema.optional(),
-})
-    .passthrough();
+//
+// R-063 #11: this object previously carried a `taskSchedules` sub-key (cron
+// hints nominally derived by `akm setup --reset-recommended`), but nothing in
+// the tasks subsystem or setup flow ever read or wrote it — confirmed dead at
+// HEAD (deriveRecommendedConfig's return type never included it either; see
+// tests/integration/setup/detect-environment.test.ts's regression guard).
+// Removed. The `setup` namespace itself is kept (passthrough) for future
+// setup-derived config.
+export const SetupConfigSchema = z.object({}).passthrough();

package/dist/core/config/schema/sources-bundles.js

@@ -10,16 +10,7 @@ import { z } from "zod";
 import { isBundleSlug } from "../../asset/asset-ref.js";
 import { httpUrl, nonEmptyString, positiveInt } from "./primitives.js";
 // ── Sources / registries / installed ────────────────────────────────────────
-const SourceConfigEntryOptionsSchema = z
-    .object({
-    /**
-     * @deprecated 0.9.0 (issue #507). Retired per-asset push-on-commit. Kept so
-     * old configs still parse; its intent maps onto the batch push gate and
-     * encountering it emits a one-time deprecation warning.
-     */
-    pushOnCommit: z.boolean().optional(),
-})
-    .passthrough();
+const SourceConfigEntryOptionsSchema = z.record(z.unknown());
 export const SourceConfigEntrySchema = z
     .object({
     type: nonEmptyString,
@@ -33,6 +24,13 @@ export const SourceConfigEntrySchema = z
 })
     .passthrough()
     .superRefine((entry, ctx) => {
+    if (entry.options && "pushOnCommit" in entry.options) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["options", "pushOnCommit"],
+            message: "options.pushOnCommit is not supported",
+        });
+    }
     if (!["filesystem", "git", "website", "npm"].includes(entry.type)) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -58,29 +56,6 @@ export const RegistryConfigEntrySchema = z
     options: z.record(z.unknown()).optional(),
 })
     .passthrough();
-const KitSourceSchema = z.enum(["filesystem", "git", "npm", "github", "website", "local"]);
-export const InstalledStashEntrySchema = z
-    .object({
-    id: nonEmptyString,
-    source: KitSourceSchema,
-    ref: nonEmptyString,
-    artifactUrl: nonEmptyString,
-    stashRoot: nonEmptyString,
-    cacheDir: nonEmptyString,
-    installedAt: nonEmptyString,
-    writable: z.boolean().optional(),
-    resolvedVersion: z.string().min(1).optional(),
-    resolvedRevision: z.string().min(1).optional(),
-})
-    .passthrough()
-    .superRefine((entry, ctx) => {
-    if (entry.writable === true && entry.source !== "git" && entry.source !== "filesystem") {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: `writable: true is only supported on filesystem and git sources (got "${entry.source}" on installed entry "${entry.id}").`,
-        });
-    }
-});
 // ── Bundles (0.9.0 config-shape cutover, spec §10.1 / D-R5) ─────────────────
 //
 // `bundles` + `defaultBundle` are the 0.9.0 desired-configuration shape that
@@ -105,6 +80,17 @@ const BundleWebsiteDescriptorSchema = z
     refresh: z.string().min(1).optional(),
     maxPages: positiveInt.optional(),
     maxDepth: positiveInt.optional(),
+    // Default true: crawl-scoped robots.txt compliance (Disallow/Crawl-delay
+    // for the akm/akm-cli product tokens or "*"). See
+    // src/sources/snapshot-fetchers/robots.ts. Opt out with `false` to
+    // restore pre-P1 behavior exactly (no /robots.txt request at all).
+    respectRobots: z.boolean().optional(),
+    // Hard wall-clock cap on the whole crawl, in milliseconds. Defaults to
+    // 10 minutes. Unlike a between-page check, this aborts work already in
+    // flight — including a `Retry-After` sleep, which a server can otherwise
+    // make arbitrarily long. Set to 0 to disable the cap entirely for a
+    // deliberately long-running crawl.
+    crawlTimeoutMs: z.number().int().min(0).optional(),
 })
     .passthrough();
 /** One component of a bundle (spec §10.1). Single-entry, transitional. */
@@ -123,6 +109,12 @@ export const BundleConfigEntrySchema = z
     website: BundleWebsiteDescriptorSchema.optional(),
     npm: z.string().min(1).optional(),
     writable: z.boolean().optional(),
+    // Opt a bundle out of indexing, search, refresh, and write targeting
+    // without deleting it. Carried over from the pre-cutover `sources[].enabled`
+    // flag, which the runtime still honors on the derived source entry
+    // (`write-source.ts`, `search-source.ts`); without it here, migrating a
+    // disabled source would silently reactivate it.
+    enabled: z.boolean().optional(),
     // The original registry install id when the bundle KEY was slug-derived from
     // it (e.g. registryId `github:owner/repo` → key `repo`). Preserved so the
     // source locator survives the config-shape migration (D-R5). Absent when the
@@ -132,6 +124,14 @@ export const BundleConfigEntrySchema = z
 })
     .passthrough()
     .superRefine((entry, ctx) => {
+    const options = entry.options;
+    if (options && typeof options === "object" && "pushOnCommit" in options) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["options", "pushOnCommit"],
+            message: "options.pushOnCommit is not supported",
+        });
+    }
     const descriptors = ["path", "git", "website", "npm"].filter((k) => entry[k] !== undefined);
     if (descriptors.length === 0) {
         ctx.addIssue({
@@ -152,6 +152,22 @@ export const BundleConfigEntrySchema = z
             message: "writable: true is only supported on path and git bundle sources",
         });
     }
+    const componentEntries = entry.components ? Object.entries(entry.components) : [];
+    if (entry.components !== undefined && componentEntries.length !== 1) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["components"],
+            message: "a bundle components map must contain exactly one component",
+        });
+    }
+    const componentEntry = componentEntries[0];
+    if (componentEntry?.[1].writable === true && (entry.website !== undefined || entry.npm !== undefined)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["components", componentEntry[0], "writable"],
+            message: "writable: true is only supported on path and git bundle sources",
+        });
+    }
 });
 /**
  * `bundles` map. Keys are workspace bundle slugs (spec §11.1 / D-R5 charset).