akm-cli 0.9.1 → 0.9.2-alpha.2

package/schemas/akm-task.json

@@ -1,109 +1,353 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://itlackey.github.io/akm/schemas/akm-task.json",
-  "title": "AKM Scheduled Task",
-  "description": "Strict version-2 YAML task definition. Exactly one target is required.",
+  "title": "AKM Task v3",
+  "description": "Strict task-v3 source document. Exactly one executable selector and exactly one scheduling source are required. GitHub action refs are recognized source syntax but are not executed by AKM 0.9.2.",
+  "x-akm-runtimeConstraints": {
+    "authoritativeParser": "src/tasks/source-v3.ts",
+    "maxSourceUtf8Bytes": 1048576,
+    "maxStringUtf8Bytes": 262144,
+    "maxJsonDepth": 64,
+    "maxJsonNodes": 10000,
+    "canonicalRefsRequireNfc": true,
+    "workingDirectoryRequiresWorkspaceRoot": true
+  },
   "type": "object",
-  "required": ["version", "schedule"],
+  "required": ["version"],
   "additionalProperties": false,
   "properties": {
-    "version": { "const": 2 },
-    "name": { "type": "string" },
-    "description": { "type": "string" },
-    "when_to_use": { "type": "string" },
-    "tags": { "type": "array", "items": { "type": "string", "minLength": 1 } },
-    "schedule": { "type": "string", "minLength": 1 },
-    "enabled": { "type": "boolean" },
-    "workflow": { "type": "string", "minLength": 1 },
-    "prompt": { "type": "string", "minLength": 1 },
-    "command": {
+    "version": { "const": 3 },
+    "name": { "type": "string", "maxLength": 262144 },
+    "uses": {
       "oneOf": [
-        { "type": "string", "minLength": 1 },
-        { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
+        { "const": "akm/command" },
+        { "$ref": "#/definitions/akmExecutableRef" },
+        { "$ref": "#/definitions/githubActionRef" }
       ]
     },
-    "params": { "type": "object" },
-    "engine": { "type": "string", "minLength": 1 },
-    "model": { "type": "string", "minLength": 1 },
-    "timeoutMs": {
-      "type": ["integer", "null"],
-      "minimum": 1,
-      "maximum": 2147483647,
-      "description": "Timeout in milliseconds, or null to disable it. Prompt tasks: the engine timeout. Command tasks: the subprocess timeout. Workflow tasks: the whole-run timeout — omit it to take the unattended default (DEFAULT_WORKFLOW_TASK_TIMEOUT_MS in src/tasks/runner.ts), null to run unbounded."
-    },
-    "maxSteps": {
-      "type": "integer",
-      "minimum": 1,
-      "description": "Workflow tasks only: stop after executing this many workflow steps (`akm workflow run --max-steps`)."
-    },
-    "maxRetries": {
-      "type": "integer",
-      "minimum": 0,
-      "maximum": 100,
-      "description": "Workflow tasks only: retry a failed workflow step this many additional times (`akm workflow run --max-retries`)."
-    },
-    "llm": { "$ref": "#/definitions/llm" },
-    "redact": {
-      "type": "array",
-      "maxItems": 32,
-      "items": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
-      "description": "NAMES ONLY: environment variable names whose values are scrubbed from this task's persisted run log and logs.db rows. Values never appear in a task file — a task file is indexed, searchable, and printed verbatim by `akm show`, so a literal secret here would leak more widely than the redaction closes. akm already scrubs config-declared credentials and infers others from the variable name; this is the escape hatch for a secret exported under a name none of those rules recognise. A name unset at run time contributes nothing."
+    "run": { "$ref": "#/definitions/nonemptyLiteral" },
+    "with": { "$ref": "#/definitions/jsonObject" },
+    "env": {
+      "type": "object",
+      "maxProperties": 256,
+      "propertyNames": { "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+      "additionalProperties": {
+        "oneOf": [
+          { "type": "string", "maxLength": 262144 },
+          { "type": "number" },
+          { "type": "boolean" }
+        ]
+      }
+    },
+    "shell": { "enum": ["bash", "sh", "zsh", "pwsh", "powershell", "cmd"] },
+    "working-directory": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 262144,
+      "pattern": "^(?![\\\\/])(?![A-Za-z]:[\\\\/])(?!.*(?:^|[\\\\/])\\.\\.(?:[\\\\/]|$))(?!.*[\\\\/]{2})(?!.*[\\\\/]$)[^\\u0000]+$"
+    },
+    "akm": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "schedule": { "$ref": "#/definitions/nonemptyLiteral" },
+        "enabled": { "type": "boolean" },
+        "description": { "type": "string", "maxLength": 262144 },
+        "when_to_use": { "type": "string", "maxLength": 262144 },
+        "tags": {
+          "type": "array",
+          "maxItems": 1024,
+          "items": { "type": "string", "minLength": 1, "maxLength": 262144 }
+        },
+        "agent": { "$ref": "#/definitions/nullableSelector" },
+        "engine": { "$ref": "#/definitions/nullableSelector" },
+        "model": { "$ref": "#/definitions/nullableSelector" },
+        "inference": {
+          "oneOf": [
+            { "$ref": "#/definitions/jsonObject" },
+            { "type": "null" }
+          ]
+        },
+        "outputSchema": {
+          "description": "A JSON Schema accepted by AKM's bounded execution-schema subset, or null. Runtime byte, depth, and node limits are declared by x-akm-runtimeConstraints.",
+          "oneOf": [
+            { "$ref": "#/definitions/outputSchemaDefinition" },
+            { "type": "null" }
+          ]
+        },
+        "tools": {
+          "oneOf": [
+            { "type": "string", "maxLength": 262144 },
+            {
+              "type": "array",
+              "maxItems": 1024,
+              "items": { "type": "string", "maxLength": 262144 }
+            },
+            { "$ref": "#/definitions/jsonObject" },
+            { "type": "null" }
+          ]
+        },
+        "timeout": {
+          "oneOf": [
+            { "type": "integer", "minimum": 0, "maximum": 2147483647 },
+            { "type": "string", "pattern": "^\\d+[mMhHdD]$" },
+            { "type": "null" }
+          ]
+        },
+        "redact": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }
+        },
+        "maxSteps": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+        "maxRetries": { "type": "integer", "minimum": 0, "maximum": 100 }
+      }
+    },
+    "on": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": false,
+      "properties": {
+        "schedule": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 64,
+          "items": {
+            "type": "object",
+            "required": ["cron"],
+            "additionalProperties": false,
+            "properties": {
+              "cron": { "$ref": "#/definitions/nonemptyLiteral" }
+            }
+          }
+        },
+        "workflow_dispatch": {
+          "oneOf": [
+            { "type": "null" },
+            { "type": "object", "maxProperties": 0, "additionalProperties": false }
+          ]
+        }
+      }
     }
   },
   "oneOf": [
     {
-      "required": ["workflow"],
-      "not": { "anyOf": [{ "required": ["prompt"] }, { "required": ["command"] }, { "required": ["engine"] }, { "required": ["model"] }, { "required": ["llm"] }] }
+      "description": "AKM's built-in anonymous/stored command action.",
+      "required": ["uses", "with"],
+      "properties": {
+        "uses": { "const": "akm/command" },
+        "with": { "$ref": "#/definitions/builtinCommandWith" }
+      },
+      "not": {
+        "anyOf": [
+          { "required": ["run"] },
+          { "required": ["shell"] },
+          { "required": ["working-directory"] }
+        ]
+      }
     },
     {
-      "required": ["prompt"],
-      "not": { "anyOf": [{ "required": ["workflow"] }, { "required": ["command"] }, { "required": ["params"] }, { "required": ["maxSteps"] }, { "required": ["maxRetries"] }] }
+      "description": "A canonical AKM executable ref or GitHub action ref.",
+      "required": ["uses"],
+      "properties": {
+        "uses": {
+          "oneOf": [
+            { "$ref": "#/definitions/akmExecutableRef" },
+            { "$ref": "#/definitions/githubActionRef" }
+          ]
+        }
+      },
+      "not": {
+        "anyOf": [
+          { "required": ["run"] },
+          { "required": ["shell"] },
+          { "required": ["working-directory"] }
+        ]
+      }
     },
     {
-      "required": ["command"],
-      "not": { "anyOf": [{ "required": ["workflow"] }, { "required": ["prompt"] }, { "required": ["params"] }, { "required": ["engine"] }, { "required": ["model"] }, { "required": ["llm"] }, { "required": ["maxSteps"] }, { "required": ["maxRetries"] }] }
+      "description": "One exact host-shell string.",
+      "required": ["run"],
+      "not": {
+        "anyOf": [
+          { "required": ["uses"] },
+          { "required": ["with"] }
+        ]
+      }
+    }
+  ],
+  "allOf": [
+    {
+      "description": "Exactly one scheduling source: akm.schedule or on.",
+      "oneOf": [
+        {
+          "required": ["akm"],
+          "properties": { "akm": { "required": ["schedule"] } },
+          "not": { "required": ["on"] }
+        },
+        {
+          "required": ["on"],
+          "not": {
+            "required": ["akm"],
+            "properties": { "akm": { "required": ["schedule"] } }
+          }
+        }
+      ]
     }
   ],
   "definitions": {
-    "llm": {
+    "nonemptyLiteral": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 262144,
+      "pattern": "^(?![\\s\\S]*\\$\\{\\{)[\\s\\S]*\\S[\\s\\S]*$"
+    },
+    "nullableSelector": {
+      "oneOf": [
+        { "type": "string", "minLength": 1, "maxLength": 262144, "pattern": ".*\\S.*" },
+        { "type": "null" }
+      ]
+    },
+    "akmExecutableRef": {
+      "type": "string",
+      "maxLength": 262144,
+      "pattern": "^(?:[^\\s:.#/]+//)?(?:commands|workflows|scripts)/(?!\\.{1,2}(?:/|$))[^\\s#\\\\/\\u0000]+(?:/(?!\\.{1,2}(?:/|$))[^\\s#\\\\/\\u0000]+)*$"
+    },
+    "githubActionRef": {
+      "type": "string",
+      "maxLength": 262144,
+      "pattern": "^(?!(?:commands|workflows|scripts)/)[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/(?!\\.{1,2}(?:/|@))[A-Za-z0-9_.-]+(?:/(?!\\.{1,2}(?:/|@))[A-Za-z0-9_.-]+)*@(?![./])(?!.*(?:@|\\.\\.|//|/\\.|\\.(?:/|$)|\\.lock(?:/|$)))[^\\s\\u0000-\\u0020\\u007f~^:?*\\[\\\\/](?:[^\\s\\u0000-\\u0020\\u007f~^:?*\\[\\\\@]*[^\\s\\u0000-\\u0020\\u007f~^:?*\\[\\\\/.@])?$"
+    },
+    "outputSchemaDefinition": {
       "type": "object",
-      "additionalProperties": false,
+      "maxProperties": 256,
       "properties": {
-        "temperature": { "type": "number" },
-        "maxTokens": { "type": "integer", "minimum": 1 },
-        "supportsJsonSchema": { "type": "boolean" },
-        "extraParams": { "$ref": "#/definitions/extraParams" },
-        "contextLength": { "type": "integer", "minimum": 1 },
-        "enableThinking": { "type": "boolean" }
-      }
+        "type": {
+          "oneOf": [
+            { "$ref": "#/definitions/outputSchemaTypeName" },
+            {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 1024,
+              "items": { "$ref": "#/definitions/outputSchemaTypeName" }
+            }
+          ]
+        },
+        "enum": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 1024,
+          "items": {
+            "oneOf": [
+              { "type": "string", "maxLength": 262144 },
+              { "type": "number" },
+              { "type": "boolean" },
+              { "type": "null" }
+            ]
+          }
+        },
+        "properties": {
+          "type": "object",
+          "maxProperties": 256,
+          "propertyNames": { "maxLength": 262144 },
+          "additionalProperties": { "$ref": "#/definitions/outputSchemaDefinition" }
+        },
+        "required": {
+          "type": "array",
+          "maxItems": 1024,
+          "items": { "type": "string", "maxLength": 262144 }
+        },
+        "items": { "$ref": "#/definitions/outputSchemaDefinition" },
+        "additionalProperties": { "type": "boolean" },
+        "minItems": { "type": "integer", "minimum": 0 },
+        "maxItems": { "type": "integer", "minimum": 0 },
+        "minLength": { "type": "integer", "minimum": 0 },
+        "maxLength": { "type": "integer", "minimum": 0 },
+        "minimum": { "type": "number" },
+        "maximum": { "type": "number" },
+        "allOf": { "$ref": "#/definitions/outputSchemaArray" },
+        "anyOf": { "$ref": "#/definitions/outputSchemaArray" },
+        "oneOf": { "$ref": "#/definitions/outputSchemaArray" },
+        "not": { "$ref": "#/definitions/outputSchemaDefinition" },
+        "$ref": false,
+        "$defs": false,
+        "definitions": false,
+        "$anchor": false,
+        "$dynamicRef": false,
+        "$dynamicAnchor": false,
+        "if": false,
+        "then": false,
+        "else": false,
+        "const": false,
+        "pattern": false,
+        "format": false,
+        "patternProperties": false,
+        "propertyNames": false,
+        "additionalItems": false,
+        "prefixItems": false,
+        "contains": false,
+        "minContains": false,
+        "maxContains": false,
+        "uniqueItems": false,
+        "multipleOf": false,
+        "exclusiveMinimum": false,
+        "exclusiveMaximum": false,
+        "minProperties": false,
+        "maxProperties": false,
+        "dependencies": false,
+        "dependentRequired": false,
+        "dependentSchemas": false,
+        "unevaluatedItems": false,
+        "unevaluatedProperties": false,
+        "contentEncoding": false,
+        "contentMediaType": false,
+        "contentSchema": false
+      },
+      "additionalProperties": { "$ref": "#/definitions/jsonValue" }
+    },
+    "outputSchemaArray": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 1024,
+      "items": { "$ref": "#/definitions/outputSchemaDefinition" }
+    },
+    "outputSchemaTypeName": {
+      "enum": ["string", "number", "integer", "boolean", "object", "array", "null"]
     },
-    "extraParams": {
+    "builtinCommandWith": {
       "type": "object",
-      "description": "Provider-specific request fields. Top-level AKM-owned fields are forbidden; credential-shaped keys are forbidden recursively after lowercase/non-alphanumeric normalization.",
-      "propertyNames": {
-        "not": {
-          "enum": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "chattemplatekwargs", "authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
-        }
+      "additionalProperties": false,
+      "properties": {
+        "ref": { "type": "string", "minLength": 1, "maxLength": 262144 },
+        "content": { "type": "string", "maxLength": 262144 },
+        "arguments": { "type": "string", "maxLength": 262144 }
       },
-      "additionalProperties": { "$ref": "#/definitions/extraParamValue" },
-      "x-akm-protectedTopLevelNormalizedKeys": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "chattemplatekwargs"],
-      "x-akm-recursivelyForbiddenNormalizedKeys": ["authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
-    },
-    "extraParamValue": {
-      "anyOf": [
-        { "type": ["string", "number", "boolean", "null"] },
-        { "type": "array", "items": { "$ref": "#/definitions/extraParamValue" } },
-        {
-          "type": "object",
-          "propertyNames": {
-            "not": {
-              "enum": ["authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
-            }
-          },
-          "additionalProperties": { "$ref": "#/definitions/extraParamValue" },
-          "x-akm-recursivelyForbiddenNormalizedKeys": ["authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
-        }
+      "oneOf": [
+        { "required": ["ref"], "not": { "required": ["content"] } },
+        { "required": ["content"], "not": { "required": ["ref"] } }
       ]
+    },
+    "jsonValue": {
+      "oneOf": [
+        { "type": "string", "maxLength": 262144 },
+        { "type": "number" },
+        { "type": "boolean" },
+        { "type": "null" },
+        { "$ref": "#/definitions/jsonArray" },
+        { "$ref": "#/definitions/jsonObject" }
+      ]
+    },
+    "jsonArray": {
+      "type": "array",
+      "maxItems": 1024,
+      "items": { "$ref": "#/definitions/jsonValue" }
+    },
+    "jsonObject": {
+      "type": "object",
+      "maxProperties": 256,
+      "propertyNames": { "maxLength": 262144 },
+      "additionalProperties": { "$ref": "#/definitions/jsonValue" }
     }
   }
 }

package/schemas/akm-workflow.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://itlackey.github.io/akm/schemas/akm-workflow.json",
   "title": "AKM Workflow",
-  "description": "Unified akm workflow frontmatter (workflow-format-unification). One markdown asset: the standard AKM asset envelope (type/description/tags/when_to_use/xrefs/updated/timestamp + the OKF v0.2 machine-stamped families) plus the orchestration graph. Per-step prose instructions and gate rubrics live in the markdown body, joined to this graph by step id — see docs/reference/workflow-schema.md. Hand-authored alongside src/workflows/program/schema.ts; the enum vocabularies and patterns here are pinned against the TypeScript constants by tests/integration/workflows/schema-drift.test.ts.",
+  "description": "This frontmatter schema applies to and validates the Markdown (.md) workflow source: the standard AKM asset envelope plus its orchestration graph. Markdown is not the sole or only workflow source; peer GitHub-shaped .yml sources use the bounded adapter and both formats compile to source IR v1. Per-step prose instructions and gate rubrics live in the Markdown body, joined to this graph by step id. Hand-authored alongside src/workflows/program/schema.ts; see docs/reference/workflow-schema.md.",
   "type": "object",
   "required": ["steps"],
   "additionalProperties": false,
@@ -90,7 +90,8 @@
         "supports_json_schema": { "type": "boolean" },
         "extra_params": { "$ref": "#/definitions/extraParams" },
         "context_length": { "type": "integer", "minimum": 1 },
-        "enable_thinking": { "type": "boolean" }
+        "enable_thinking": { "type": "boolean" },
+        "reasoning_effort": { "type": "string", "minLength": 1 }
       }
     },
     "extraParams": {
@@ -98,11 +99,11 @@
       "description": "Provider-specific request fields. Top-level AKM-owned fields are forbidden; credential-shaped keys are forbidden recursively after lowercase/non-alphanumeric normalization.",
       "propertyNames": {
         "not": {
-          "enum": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "chattemplatekwargs", "authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
+          "enum": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "reasoningeffort", "chattemplatekwargs", "authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
         }
       },
       "additionalProperties": { "$ref": "#/definitions/extraParamValue" },
-      "x-akm-protectedTopLevelNormalizedKeys": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "chattemplatekwargs"],
+      "x-akm-protectedTopLevelNormalizedKeys": ["model", "messages", "temperature", "maxtokens", "responseformat", "stream", "streamoptions", "enablethinking", "reasoningeffort", "chattemplatekwargs"],
       "x-akm-recursivelyForbiddenNormalizedKeys": ["authorization", "headers", "apikey", "token", "password", "secret", "cookie", "setcookie"]
     },
     "extraParamValue": {
@@ -215,7 +216,7 @@
     },
     "exec": {
       "type": "object",
-      "description": "Run a shell command as this unit instead of dispatching to an engine. `command` is an ARGV ARRAY and there is no shell-string form: the child is spawned directly, so shell metacharacters (`;` `|` `&&` `$(…)` `>` `*`) are inert literal argument bytes — the quoting/injection class simply does not exist. Write the interpreter explicitly (e.g. [\"bash\", \"-lc\", \"a | b\"]) when a pipeline is really wanted. stdout is the promoted step artifact with trailing newlines stripped (like shell `$(…)`); when the unit declares an `output` schema, stdout must instead be exactly one JSON value, which is validated against it. A non-zero exit fails the unit with failure reason `non_zero_exit`, honoring `retry:` and `on_error:` like any other unit. The child's environment is an ALLOWLIST by default (PATH, HOME, locale/temp vars, the Windows process-creation essentials) — widen it with `pass_env` or `inherit_env`.",
+      "description": "Run a shell command as this unit instead of dispatching to an engine. `command` is an ARGV ARRAY and there is no shell-string form: the child is spawned directly, so shell metacharacters (`;` `|` `&&` `$(…)` `>` `*`) are inert literal argument bytes — the quoting/injection class simply does not exist. Write the interpreter explicitly (e.g. [\"bash\", \"-lc\", \"a | b\"]) when a pipeline is really wanted. stdout is the promoted step artifact with trailing newlines stripped (like shell `$(…)`); when the unit declares an `output` schema, stdout must instead be exactly one JSON value, which is validated against it. A non-zero exit fails the unit with failure reason `non_zero_exit`, honoring `retry:` and `on_error:` like any other unit. The child's environment is an ALLOWLIST by default (PATH, HOME, locale/temp vars, the Windows process-creation essentials) — widen it only with named `env:` environment bindings or `pass_env`.",
       "required": ["command"],
       "additionalProperties": false,
       "properties": {
@@ -247,10 +248,6 @@
             "type": "string",
             "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
           }
-        },
-        "inherit_env": {
-          "type": "boolean",
-          "description": "Give the command akm's ENTIRE environment instead of the default allowlist. Opt in only when a command genuinely needs the caller's whole environment (a wrapper script, a toolchain with many ambient variables); prefer `pass_env` or `env:` bindings, which keep what the command can see explicit in the frontmatter diff. Dispatch-significant: toggling it changes the unit's input hash."
         }
       }
     },

package/dist/core/migration-operation.js

@@ -1,75 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-import crypto from "node:crypto";
-import path from "node:path";
-import { ConfigError } from "./errors.js";
-import { classifyPathAccess, describeInaccessiblePath } from "./path-access.js";
-import { getConfigPath, getDataDir } from "./paths.js";
-let afterPendingCheckHook;
-/** TEST-ONLY: run once after a clear pending-operation check. */
-export function _setAfterPendingOperationCheckHookForTests(hook) {
-    afterPendingCheckHook = hook;
-}
-function installationId() {
-    return crypto
-        .createHash("sha256")
-        .update(path.resolve(path.dirname(getConfigPath())))
-        .update("\0")
-        .update(path.resolve(getDataDir()))
-        .digest("hex")
-        .slice(0, 24);
-}
-export function getMigrationOperationRoot() {
-    return path.join(getDataDir(), "backups", "migrations", installationId());
-}
-export function getMigrationRestoreJournalPath() {
-    return path.join(getMigrationOperationRoot(), "restore-active.json");
-}
-export function getMigrationApplyJournalPath() {
-    return path.join(getMigrationOperationRoot(), "apply-active.json");
-}
-/**
- * Predictable path for the config `akm migrate apply` auto-generates when no
- * `--config` is given and the active config still carries the pre-cutover
- * `stashDir`/`sources[]`/`installed[]` shape (see `config-migrate.ts`'s
- * `buildMigrationPlan`/`writeGeneratedTargetConfig`). Deliberately NOT the
- * live `config.json` — the live 0.8 file must stay byte-for-byte untouched
- * until `publishConfigLast` performs its normal atomic install, so the
- * generated draft lives here instead, next to the apply/restore sentinels.
- * Stable across invocations (keyed only by installation id, not a run id) so
- * a second `migrate apply`/`migrate status` with still no `--config` finds
- * the same file an operator may have hand-edited (e.g. to add `engines`)
- * after the first run generated it.
- */
-export function getMigrationGeneratedConfigPath() {
-    return path.join(getMigrationOperationRoot(), "generated-config.json");
-}
-/**
- * Refuse canonical config/database access while a migration or restore is
- * mid-flight.
- *
- * This is a SAFETY gate, so "I could not tell" must fail the same way "yes"
- * does. `fs.existsSync` answered `false` for an unreadable journal exactly as
- * for an absent one (#791), which meant a permission fault on the journal
- * silently CLEARED the gate and let akm open the canonical databases on top of
- * a half-applied migration. Absence is the only answer that may open the door.
- */
-export function assertNoPendingMigrationOperation() {
-    for (const [kind, journalPath] of [
-        ["restore", getMigrationRestoreJournalPath()],
-        ["migration apply", getMigrationApplyJournalPath()],
-    ]) {
-        const { access, code } = classifyPathAccess(journalPath);
-        if (access === "inaccessible") {
-            throw new ConfigError(`Cannot determine whether an AKM ${kind} recovery is pending: ${describeInaccessiblePath(journalPath, code)}. ` +
-                "Refusing canonical config/database access — proceeding could write on top of a half-applied migration.", "DATA_DIR_UNREADABLE");
-        }
-        if (access === "present") {
-            throw new ConfigError(`AKM ${kind} recovery is pending at ${journalPath}; refusing canonical config/database access until recovery completes.`, "INVALID_CONFIG_FILE");
-        }
-    }
-    const hook = afterPendingCheckHook;
-    afterPendingCheckHook = undefined;
-    hook?.();
-}

package/dist/integrations/agent/model-aliases.js

@@ -1,74 +0,0 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
-/**
- * Built-in alias table. Alias keys are lowercase.
- *
- * Platform model string conventions:
- *   opencode — "<provider>/<model>"  e.g. "opencode/claude-opus-4-7"
- *   claude   — bare model name       e.g. "claude-opus-4-7"
- *              (Claude Code also accepts its own built-in shorthands, but we
- *               always resolve to the full name for determinism)
- */
-const BUILTIN_ALIASES = [
-    {
-        // Anthropic's Mythos-class tier above Opus — the recommended resolution
-        // target for the `deep` workflow tier (see docs/reference/workflow-schema.md).
-        alias: "fable",
-        platforms: {
-            claude: "claude-fable-5",
-            opencode: "opencode/claude-fable-5",
-        },
-    },
-    {
-        alias: "opus",
-        platforms: {
-            claude: "claude-opus-4-7",
-            opencode: "opencode/claude-opus-4-7",
-        },
-    },
-    {
-        alias: "sonnet",
-        platforms: {
-            claude: "claude-sonnet-4-6",
-            opencode: "opencode/claude-sonnet-4-6",
-        },
-    },
-    {
-        alias: "haiku",
-        platforms: {
-            claude: "claude-haiku-4-5-20251001",
-            opencode: "opencode/claude-haiku-4-5",
-        },
-    },
-];
-/**
- * Resolve a model alias or exact model ID to the string the target platform
- * CLI expects for its --model flag.
- *
- * @param model   Raw alias ("opus") or exact model ID ("claude-opus-4-7").
- * @param platform Builder platform name ("claude", "opencode", ...).
- * @param custom  Profile-level aliases from config.json — take priority over globals and builtins.
- * @param global  Config-root `modelAliases` tier table (alias → platform → model, `"*"` fallback).
- * @param fallbackPlatforms Additional global tier columns checked after `platform` and before `"*"`.
- * @returns Resolved model string, or `model` verbatim when no alias matches.
- */
-export function resolveModel(model, platform, custom, global, fallbackPlatforms = []) {
-    const key = model.toLowerCase();
-    if (custom?.[key])
-        return custom[key];
-    const tier = global?.[key];
-    const fromGlobal = tier?.[platform] ?? fallbackPlatforms.map((fallback) => tier?.[fallback]).find(Boolean) ?? tier?.["*"];
-    if (fromGlobal)
-        return fromGlobal;
-    const entry = BUILTIN_ALIASES.find((a) => a.alias === key);
-    return entry?.platforms[platform] ?? model;
-}
-/** Resolve a direct/fallback LLM model through engine-specific, `llm`, then `*` tiers. */
-export function resolveLlmModel(model, engine, global) {
-    return resolveModel(model, engine, undefined, global, ["llm"]);
-}
-/** Return all built-in alias entries (for tests and documentation). */
-export function listBuiltinModelAliases() {
-    return BUILTIN_ALIASES;
-}