akm-cli 0.9.17-alpha.3 → 0.9.17-alpha.4

package/dist/akm

@@ -4,212 +4,110 @@
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 import { spawn, spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
 import { fileURLToPath } from "node:url";
 
-const CONTEXT_ARG = "--scheduler-context";
-const CONTEXT_KEYS = ["AKM_BUNDLE_DIR", "AKM_CONFIG_DIR", "AKM_DATA_DIR", "AKM_CACHE_DIR", "AKM_STATE_DIR"];
-const CONTROL_CHARACTER = /[\u0000-\u001f\u007f-\u009f]/;
+// `--scheduler-context <descriptor>` passes through untouched: the CLI loads
+// and validates it before anything else (`consumeSchedulerContextArg` in
+// src/cli.ts). The scheduler supplies PATH itself (the crontab's `# akm:env`
+// line, a launchd plist's EnvironmentVariables), so runtime selection below
+// needs nothing from the descriptor. This launcher used to re-validate the
+// descriptor with its own copy of the schema, and that copy rejected every
+// descriptor the CLI writes since 0.9.17.
 
-function invalidContext(file, reason) {
-  throw new Error(`Invalid scheduler context descriptor "${file}": ${reason}.`);
-}
-
-function readSchedulerContext(file) {
-  if (CONTROL_CHARACTER.test(file) || (!path.posix.isAbsolute(file) && !path.win32.isAbsolute(file))) {
-    invalidContext(file, "path must be absolute");
-  }
-  let linkStat;
-  try {
-    linkStat = fs.lstatSync(file);
-  } catch (error) {
-    invalidContext(file, error instanceof Error ? error.message : String(error));
-  }
-  if (linkStat.isSymbolicLink()) invalidContext(file, "symbolic links are not allowed");
-  if (!linkStat.isFile()) invalidContext(file, "path is not a regular file");
-
-  let bytes;
-  let fd;
-  try {
-    const noFollow = process.platform === "win32" ? 0 : fs.constants.O_NOFOLLOW;
-    fd = fs.openSync(file, fs.constants.O_RDONLY | noFollow);
-    const stat = fs.fstatSync(fd);
-    if (!stat.isFile()) invalidContext(file, "path is not a regular file");
-    if (process.platform !== "win32") {
-      if (typeof process.getuid !== "function") {
-        invalidContext(file, "current uid is unavailable for ownership verification");
-      }
-      const uid = process.getuid();
-      if (stat.uid !== uid) invalidContext(file, `file owner ${stat.uid} does not match uid ${uid}`);
-      if ((stat.mode & 0o077) !== 0) invalidContext(file, "group or other permissions must be disabled");
-    }
-    bytes = fs.readFileSync(fd);
-  } finally {
-    if (fd !== undefined) fs.closeSync(fd);
-  }
-
-  const match = /^([a-f0-9]{64})\.json$/.exec(path.basename(file));
-  const digest = createHash("sha256").update(bytes).digest("hex");
-  if (!match || match[1] !== digest) {
-    invalidContext(file, "content SHA-256 does not match the descriptor filename");
-  }
-
-  let descriptor;
-  try {
-    descriptor = JSON.parse(bytes.toString("utf8"));
-  } catch (error) {
-    invalidContext(file, error instanceof Error ? error.message : String(error));
-  }
-  if (
-    typeof descriptor !== "object" ||
-    descriptor === null ||
-    Array.isArray(descriptor) ||
-    descriptor.version !== 1 ||
-    Object.keys(descriptor).sort().join("\0") !== "environment\0version"
-  ) {
-    invalidContext(file, "expected the scheduler context v1 schema");
-  }
-  const environment = descriptor.environment;
-  const expected = [...CONTEXT_KEYS, "PATH"].sort();
-  const keys =
-    environment && typeof environment === "object" && !Array.isArray(environment)
-      ? Object.keys(environment).sort()
-      : [];
-  if (keys.length !== expected.length || keys.some((key, index) => key !== expected[index])) {
-    invalidContext(file, "environment keys do not match the scheduler context v1 schema");
-  }
-  for (const key of CONTEXT_KEYS) {
-    const value = environment[key];
-    if (
-      typeof value !== "string" ||
-      value.trim() === "" ||
-      CONTROL_CHARACTER.test(value) ||
-      (!path.posix.isAbsolute(value) && !path.win32.isAbsolute(value))
-    ) {
-      invalidContext(file, `${key} must be an absolute path without control characters`);
-    }
-  }
-  if (typeof environment.PATH !== "string" || CONTROL_CHARACTER.test(environment.PATH)) {
-    invalidContext(file, "PATH must be a string without control characters");
-  }
-  return environment;
-}
+process.env.AKM_LAUNCHER_NODE = process.execPath;
+process.env.AKM_LAUNCHER_PATH = fileURLToPath(import.meta.url);
+// #956: lets the child (and its lock payloads) name the launcher pid
+// alongside its own, and lets the child's parent-death watchdog tell a
+// real launcher-managed run apart from a direct `bun src/cli.ts` run.
+process.env.AKM_LAUNCHER_PID = String(process.pid);
 
-const contextIndex = process.argv.indexOf(CONTEXT_ARG);
-let contextValid = true;
-if (contextIndex !== -1) {
-  try {
-    const contextPath = process.argv[contextIndex + 1];
-    if (!contextPath) throw new Error(`${CONTEXT_ARG} requires an absolute path.`);
-    const environment = readSchedulerContext(contextPath);
-    const expected = [...CONTEXT_KEYS, "PATH"].sort();
-    for (const key of expected) process.env[key] = environment[key];
-    process.argv.splice(contextIndex, 2);
-  } catch (error) {
-    console.error(`akm: ${error instanceof Error ? error.message : String(error)}`);
-    process.exitCode = 78;
-    contextValid = false;
+if (!process.versions.bun) {
+  const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
+  if (major < 22) {
+    console.error("The akm-cli npm package requires Node.js >= 22 to bootstrap.");
+    process.exit(1);
   }
 }
 
-if (contextValid) {
-  process.env.AKM_LAUNCHER_NODE = process.execPath;
-  process.env.AKM_LAUNCHER_PATH = fileURLToPath(import.meta.url);
-  // #956: lets the child (and its lock payloads) name the launcher pid
-  // alongside its own, and lets the child's parent-death watchdog tell a
-  // real launcher-managed run apart from a direct `bun src/cli.ts` run.
-  process.env.AKM_LAUNCHER_PID = String(process.pid);
+const bunProbe = process.versions.bun
+  ? { status: 0, stdout: process.versions.bun }
+  : spawnSync("bun", ["--version"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 5_000,
+    });
+const [bunMajor = 0] = (bunProbe.status === 0 ? bunProbe.stdout.trim() : "").split(".").map(Number);
+const useBun = bunMajor >= 1;
+const bunEntry = fileURLToPath(new URL("./cli.js", import.meta.url));
+const nodeEntry = fileURLToPath(new URL("./cli-node.mjs", import.meta.url));
 
-  if (!process.versions.bun) {
-    const [major = 0, minor = 0] = process.versions.node.split(".").map(Number);
-    if (major < 22) {
-      console.error("The akm-cli npm package requires Node.js >= 22 to bootstrap.");
-      process.exit(1);
+if (!useBun && !process.versions.bun) {
+  await import("./cli-node.mjs");
+} else {
+  const command = useBun ? (process.versions.bun ? process.execPath : "bun") : "node";
+  const entry = useBun ? bunEntry : nodeEntry;
+  const runtime = useBun ? "Bun" : "Node.js";
+  const result = await new Promise((resolve) => {
+    const child = spawn(command, [entry, ...process.argv.slice(2)], {
+      stdio: "inherit",
+      env: process.env,
+      // #956: give the child its OWN process group on POSIX (`setsid()` —
+      // does not touch its inherited stdio; see `spawnsOwnProcessGroup` in
+      // src/core/subprocess.ts for the Windows caveat that rules this out
+      // there). Without this, a spawned child shares the launcher's
+      // process group by default, so a signal delivered to that GROUP (a
+      // terminal's Ctrl-C, or `kill -SIGINT -<pgid>`) reaches the child
+      // directly AND the launcher, which then also forwards it — a real
+      // second signal lands microseconds after the first. The child's
+      // `process.once(signal, ...)` handler has already unregistered
+      // itself for its first (direct) copy, so the second falls through
+      // to the runtime's default disposition (immediate termination) and
+      // the child's graceful shutdown (lock release, in-flight abort)
+      // never runs. Detaching the child's process group makes the
+      // launcher's forward below the SOLE delivery path to the child, so
+      // it is always exactly one signal.
+      detached: process.platform !== "win32",
+    });
+    // A `kill <launcher-pid>` (a scheduler timeout, a supervisor, an
+    // operator) used to end only this wrapper, orphaning the bun child —
+    // it kept running (and holding locks) for as long as its own work took.
+    // Forward the same signal so the child dies with its parent. Never
+    // forward once the child has already exited: forwarding to a
+    // dead/replaced pid would be at best a no-op and at worst a signal to
+    // an unrelated process that reused the pid.
+    let childExited = false;
+    child.once("exit", () => {
+      childExited = true;
+    });
+    const forwardSignal = (signal) => {
+      if (childExited) return;
+      try {
+        child.kill(signal);
+      } catch {
+        // Child exited in the race between the check above and here.
+      }
+    };
+    // `.once`, not `.on`: Node/Bun suppress a signal's default
+    // (process-terminating) disposition for as long as ANY listener stays
+    // registered for it. A persistent `.on` listener would still be
+    // registered when the `process.kill(process.pid, result.signal)`
+    // re-raise below runs at shutdown, swallowing it and leaving this
+    // launcher exiting 0 instead of reflecting the child's signal. `.once`
+    // consumes only the externally-delivered signal that triggers the
+    // forward, so the re-raise correctly falls through to the OS default.
+    for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"]) {
+      process.once(signal, () => forwardSignal(signal));
     }
-  }
+    child.once("error", (error) => resolve({ error }));
+    child.once("exit", (code, signal) => resolve({ code, signal }));
+  });
 
-  const bunProbe = process.versions.bun
-    ? { status: 0, stdout: process.versions.bun }
-    : spawnSync("bun", ["--version"], {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "ignore"],
-        timeout: 5_000,
-      });
-  const [bunMajor = 0] = (bunProbe.status === 0 ? bunProbe.stdout.trim() : "").split(".").map(Number);
-  const useBun = bunMajor >= 1;
-  const bunEntry = fileURLToPath(new URL("./cli.js", import.meta.url));
-  const nodeEntry = fileURLToPath(new URL("./cli-node.mjs", import.meta.url));
-
-  if (!useBun && !process.versions.bun) {
-    await import("./cli-node.mjs");
+  if (result.error) {
+    console.error(`akm launcher could not start ${runtime}: ${result.error.message}`);
+    process.exitCode = 127;
+  } else if (result.signal) {
+    process.kill(process.pid, result.signal);
   } else {
-    const command = useBun ? (process.versions.bun ? process.execPath : "bun") : "node";
-    const entry = useBun ? bunEntry : nodeEntry;
-    const runtime = useBun ? "Bun" : "Node.js";
-    const result = await new Promise((resolve) => {
-      const child = spawn(command, [entry, ...process.argv.slice(2)], {
-        stdio: "inherit",
-        env: process.env,
-        // #956: give the child its OWN process group on POSIX (`setsid()` —
-        // does not touch its inherited stdio; see `spawnsOwnProcessGroup` in
-        // src/core/subprocess.ts for the Windows caveat that rules this out
-        // there). Without this, a spawned child shares the launcher's
-        // process group by default, so a signal delivered to that GROUP (a
-        // terminal's Ctrl-C, or `kill -SIGINT -<pgid>`) reaches the child
-        // directly AND the launcher, which then also forwards it — a real
-        // second signal lands microseconds after the first. The child's
-        // `process.once(signal, ...)` handler has already unregistered
-        // itself for its first (direct) copy, so the second falls through
-        // to the runtime's default disposition (immediate termination) and
-        // the child's graceful shutdown (lock release, in-flight abort)
-        // never runs. Detaching the child's process group makes the
-        // launcher's forward below the SOLE delivery path to the child, so
-        // it is always exactly one signal.
-        detached: process.platform !== "win32",
-      });
-      // A `kill <launcher-pid>` (a scheduler timeout, a supervisor, an
-      // operator) used to end only this wrapper, orphaning the bun child —
-      // it kept running (and holding locks) for as long as its own work took.
-      // Forward the same signal so the child dies with its parent. Never
-      // forward once the child has already exited: forwarding to a
-      // dead/replaced pid would be at best a no-op and at worst a signal to
-      // an unrelated process that reused the pid.
-      let childExited = false;
-      child.once("exit", () => {
-        childExited = true;
-      });
-      const forwardSignal = (signal) => {
-        if (childExited) return;
-        try {
-          child.kill(signal);
-        } catch {
-          // Child exited in the race between the check above and here.
-        }
-      };
-      // `.once`, not `.on`: Node/Bun suppress a signal's default
-      // (process-terminating) disposition for as long as ANY listener stays
-      // registered for it. A persistent `.on` listener would still be
-      // registered when the `process.kill(process.pid, result.signal)`
-      // re-raise below runs at shutdown, swallowing it and leaving this
-      // launcher exiting 0 instead of reflecting the child's signal. `.once`
-      // consumes only the externally-delivered signal that triggers the
-      // forward, so the re-raise correctly falls through to the OS default.
-      for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"]) {
-        process.once(signal, () => forwardSignal(signal));
-      }
-      child.once("error", (error) => resolve({ error }));
-      child.once("exit", (code, signal) => resolve({ code, signal }));
-    });
-
-    if (result.error) {
-      console.error(`akm launcher could not start ${runtime}: ${result.error.message}`);
-      process.exitCode = 127;
-    } else if (result.signal) {
-      process.kill(process.pid, result.signal);
-    } else {
-      process.exitCode = result.code ?? 1;
-    }
+    process.exitCode = result.code ?? 1;
   }
 }

package/dist/cli/shared.js

@@ -9,12 +9,13 @@
  */
 import { defineCommand } from "citty";
 import { stringify as yamlStringify } from "yaml";
+import { renderHealthHtml } from "../commands/health/renderers.js";
 import { assertNever } from "../core/assert.js";
 import { AkmError, UsageError } from "../core/errors.js";
 import { getOutputMode } from "../output/context.js";
 import { renderGenericHtml, renderGenericMarkdown, renderGenericText } from "../output/generic-render.js";
 import { deliverRendered } from "../output/html-render.js";
-import { getHtmlRendererHandler, getMdRendererHandler } from "../output/render-registry.js";
+import { getMdRendererHandler } from "../output/render-registry.js";
 import { shapeForCommand } from "../output/shapes.js";
 import { formatPlain, outputJsonl } from "../output/text.js";
 import { parseAllFlagValues } from "./invocation.js";
@@ -330,7 +331,10 @@ export function output(command, result) {
             return;
         }
         case "html": {
-            const rendered = getHtmlRendererHandler(command)?.(shaped, mode.detail);
+            // `akm health` is the only command with a bespoke HTML report, so it is
+            // called directly rather than through a registry with one possible
+            // registrant (see `output/render-registry.ts`).
+            const rendered = command === "health" ? renderHealthHtml(shaped) : null;
             deliverRendered(rendered ?? renderGenericHtml(command, shaped), mode.outputPath);
             return;
         }

package/dist/cli.js

@@ -177,7 +177,7 @@ const setupCommand = defineCommand({
         // the work, matching the `sync --push/--no-push` pattern. A flag
         // DECLARED as `no-init` can never be negated: `--no-init` parses as
         // "negate `init`", a name nothing declared, leaving the real key at its
-        // default forever — see `search --no-project-context`'s identical fix.
+        // default forever — see `search --no-track-usage`'s identical fix.
         init: {
             type: "boolean",
             default: true,
@@ -545,19 +545,32 @@ const helpCommand = defineGroupCommand({
         process.stdout.write(`${await renderSectionedRootHelp()}\n`);
     },
 });
+// Root `--help` text for the exit-code table. `EXIT_CODES` (src/cli/shared.ts)
+// is the single source of the numbers; this only supplies the prose next to
+// each one, so there is no third, independently-drifting copy of the table
+// (the other copy is errors.ts's doc comment, which documents by reference
+// instead of repeating the numbers).
+const EXIT_CODE_DESCRIPTIONS = [
+    [EXIT_CODES.SUCCESS, "success"],
+    [EXIT_CODES.GENERAL, "not found / command-reported failure"],
+    [EXIT_CODES.USAGE, "usage error"],
+    [EXIT_CODES.HEALTH_WARN, "health warn (akm health only)"],
+    [EXIT_CODES.INTERNAL, "internal / unclassified error"],
+    [
+        EXIT_CODES.TEMPFAIL,
+        "transient (retry shortly — another akm process holds a lock or is writing state.db or index.db)",
+    ],
+    [EXIT_CODES.CONFIG, "config error"],
+];
+function renderExitCodesHelp() {
+    return EXIT_CODE_DESCRIPTIONS.map(([code, description]) => `  ${String(code).padEnd(4)}${description}`).join("\n");
+}
 export const main = defineCommand({
     meta: {
         name: "akm",
         version: pkgVersion,
         description: "Agent Knowledge Manager — search, show, and manage assets from your bundle.\n\n" +
-            "Exit codes:\n" +
-            "  0   success\n" +
-            "  1   not found / command-reported failure\n" +
-            "  2   usage error\n" +
-            "  4   health warn (akm health only)\n" +
-            "  70  internal / unclassified error\n" +
-            "  75  transient (retry shortly — another akm process holds a lock or is writing state.db or index.db)\n" +
-            "  78  config error",
+            `Exit codes:\n${renderExitCodesHelp()}`,
     },
     args: {
         // Single-sourced from GLOBAL_OUTPUT_ARGS (src/cli/shared.ts) so root help

package/dist/commands/agent/agent-dispatch.js

@@ -5,7 +5,7 @@ import { UsageError } from "../../core/errors.js";
 import { warn } from "../../core/warn.js";
 import { isPortableExecutionAgentSelector } from "../../execution/source.js";
 import { fallbackAnnouncement, NO_ENGINE_MESSAGE_SUFFIX, NO_ENGINE_REMEDY, withEngineFallback, } from "../../integrations/agent/engine-fallback.js";
-import { executeInteractiveAgentInvocation } from "../../integrations/agent/execution-lowering.js";
+import { executeInteractiveAgentInvocation } from "../../integrations/agent/runner-dispatch.js";
 import { executeCommandInvocation } from "../command/command-execution.js";
 function canonicalCurrent(options) {
     const current = {};

package/dist/commands/command/command-execution.js

@@ -1,31 +1,23 @@
 // This Source Code Form is subject to the terms of the Mozilla Public
 // License, v. 2.0. If a copy of the MPL was not distributed with this
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
-import { ConfigError, UsageError } from "../../core/errors.js";
-import { cloneExecutionJsonObject } from "../../execution/json.js";
+import { UsageError } from "../../core/errors.js";
 import { createInlineResolvedCommand, createResolvedCommand, createResolvedPersona, } from "../../execution/resolved-request.js";
 import { isPortableExecutionAgentSelector, } from "../../execution/source.js";
 import { recordIndexedShowUsage } from "../../indexer/usage/show-usage.js";
 import { resolveUsageEventSource } from "../../indexer/usage/usage-events.js";
-import { fallbackAnnouncement, NO_ENGINE_MESSAGE_SUFFIX, NO_ENGINE_REMEDY, } from "../../integrations/agent/engine-fallback.js";
-import { requireAuthorizedExecutionPlan, } from "../../integrations/agent/execution-cascade.js";
-import { dispatchLoweredExecutionRequest, lowerResolvedExecutionRequest, } from "../../integrations/agent/execution-lowering.js";
-import { prepareResolvedExecution } from "../../integrations/agent/execution-preparation.js";
+import { fallbackAnnouncement } from "../../integrations/agent/engine-fallback.js";
+import { buildExecution, resolveExecution, } from "../../integrations/agent/execution.js";
+import { runExecution } from "../../integrations/agent/runner-dispatch.js";
 import { parseBuiltinCommandAction } from "./builtin-action.js";
 import { loadAdapterExecutionSource, } from "./execution-source-loader.js";
 import { applyPortableCommandArguments } from "./portable-template.js";
 /**
- * F-1 (spec §5.2 point 3): resolve the ambient-first provenance stamp
- * (matching the native arm's own `process.env.AKM_EVENT_SOURCE ?? …`) and
- * hand it to `dispatchLoweredExecutionRequest`'s dedicated, single-purpose
- * `eventSource` field — never through `runOptions`/`agentOptions`, which
- * stays exactly as untrusted for overriding resolved content as it was
- * before P1b (a caller-supplied `runOptions.env` still cannot replace frozen
- * request data, including a scheduler-restored directory value — see
- * `tests/integration/tasks-runner.test.ts`'s "forwards scheduled AKM
- * directory context … without trusting task or caller overrides").
+ * The ambient `AKM_EVENT_SOURCE` wins over the task runner's provenance; it
+ * rides `runExecution`'s single-purpose `eventSource`, never `runOptions.env`,
+ * so a caller cannot replace the request's own environment.
  */
-function loweredDispatchOptions(options) {
+function runOptionsFor(options) {
     const { eventSource, ...rest } = options;
     if (eventSource === undefined)
         return rest;
@@ -59,11 +51,7 @@ function qualifyCommandSelectedPersona(selector, command) {
         return selector;
     return `${command.identity.bundle}//${selector}`;
 }
-function snapshotCommandConfig(config, path = "command config") {
-    return cloneExecutionJsonObject(config, path);
-}
 export async function prepareCommandInvocation(options) {
-    const inputConfig = snapshotCommandConfig(options.config, "command input config");
     const action = parseBuiltinCommandAction(options.action);
     const sourceLoader = options.sourceLoader ?? defaultSourceLoader;
     let renderedCommand;
@@ -71,7 +59,7 @@ export async function prepareCommandInvocation(options) {
     let command;
     if (action.kind === "stored") {
         const rendered = await sourceLoader(action.ref, "command", {
-            config: inputConfig,
+            config: options.config,
             ...(options.sourceLookup ? { lookup: options.sourceLookup } : {}),
         });
         if (rendered.kind !== "command")
@@ -110,7 +98,7 @@ export async function prepareCommandInvocation(options) {
             ? qualifyCommandSelectedPersona(selectedAgent.value, renderedCommand)
             : selectedAgent.value;
         const rendered = await sourceLoader(lookupRef, "persona", {
-            config: inputConfig,
+            config: options.config,
             ...(options.sourceLookup ? { lookup: options.sourceLookup } : {}),
         });
         if (rendered.kind !== "persona")
@@ -118,10 +106,9 @@ export async function prepareCommandInvocation(options) {
         renderedPersona = rendered;
     }
     const persona = renderedPersona ? createResolvedPersona(renderedPersona) : selectedAgent.present ? null : undefined;
-    return prepareResolvedExecution({
+    return resolveExecution({
         command,
-        config: inputConfig,
-        invocationKind: options.invocationKind ?? "direct",
+        config: options.config,
         ...(persona !== undefined ? { persona } : {}),
         ...(renderedPersona ? { agentLayer: { id: renderedPersona.identity.ref, values: renderedPersona.defaults } } : {}),
         commandLayer: {
@@ -131,7 +118,6 @@ export async function prepareCommandInvocation(options) {
         ...(options.invocationDefaults ? { invocationDefaults: options.invocationDefaults } : {}),
         ...(options.current ? { current: options.current } : {}),
         ...(options.modelMap ? { modelMap: options.modelMap } : {}),
-        ...(options.authorizeTools ? { authorizeTools: options.authorizeTools } : {}),
     });
 }
 function compareText(left, right) {
@@ -207,21 +193,6 @@ function safeDiagnosticNotice(notice) {
     if (!safeDiagnosticToken(notice.adapter))
         return undefined;
     switch (notice.code) {
-        case "engine-fallback":
-            return Object.freeze({
-                code: "engine-fallback",
-                severity: "info",
-                adapter: "akm",
-                field: "engine",
-                message: "No engine was selected; using the fixed opencode-sdk fallback.",
-            });
-        case "unrecognized-request-notice":
-            return Object.freeze({
-                code: "unrecognized-request-notice",
-                severity: "warning",
-                adapter: "akm",
-                message: "An unrecognized durable execution notice was omitted at the engine lowering boundary.",
-            });
         case "untranslated-field": {
             const field = canonicalDiagnosticNoticeField(notice.field);
             if (!field)
@@ -264,26 +235,20 @@ function diagnosticNotices(notices) {
     return Object.freeze([...canonical.values()].sort((left, right) => compareText(JSON.stringify(left), JSON.stringify(right))));
 }
 /**
- * Authorize and lower a prepared invocation, then project only safe structural
- * diagnostics. It never acquires a dispatch lease, materializes credentials,
- * records usage, or exposes request/plan values.
+ * Build a prepared invocation and project only safe structural diagnostics.
+ * Reads no credential, records no usage, and exposes no request values.
  */
 export function inspectPreparedCommandInvocation(prepared) {
-    const request = requireAuthorizedExecutionPlan(prepared.plan);
-    const lowered = lowerResolvedExecutionRequest(request, prepared.config);
-    const selectedEngine = request.engine.name;
-    if (!selectedEngine) {
-        throw new ConfigError(`command ${NO_ENGINE_MESSAGE_SUFFIX} ${NO_ENGINE_REMEDY}`, "INVALID_CONFIG_FILE");
-    }
-    return Object.freeze({
+    const built = buildExecution(prepared.request, prepared.runner);
+    return {
         schemaVersion: 1,
         shape: "command-dry-run",
         ok: true,
         dryRun: true,
-        engine: selectedEngine,
-        provenance: diagnosticProvenance(prepared.plan.provenance),
-        notices: diagnosticNotices(lowered.notices),
-    });
+        engine: prepared.request.engine.name,
+        provenance: diagnosticProvenance(prepared.provenance),
+        notices: diagnosticNotices(built.notices),
+    };
 }
 function resultEnvelope(result, engine, warnings, notices) {
     return {
@@ -302,13 +267,10 @@ function resultEnvelope(result, engine, warnings, notices) {
     };
 }
 export async function dispatchPreparedCommandInvocation(prepared, options = {}) {
-    const request = requireAuthorizedExecutionPlan(prepared.plan);
-    const lowered = lowerResolvedExecutionRequest(request, prepared.config);
+    const { request } = prepared;
+    const built = buildExecution(request, prepared.runner);
     const selectedEngine = request.engine.name;
-    if (!selectedEngine) {
-        throw new ConfigError(`command ${NO_ENGINE_MESSAGE_SUFFIX} ${NO_ENGINE_REMEDY}`, "INVALID_CONFIG_FILE");
-    }
-    const result = await dispatchLoweredExecutionRequest(lowered, loweredDispatchOptions(options));
+    const result = await runExecution(built, runOptionsFor(options));
     const consumedRefs = new Set();
     if (request.command.source)
         consumedRefs.add(request.command.source.ref);
@@ -322,7 +284,7 @@ export async function dispatchPreparedCommandInvocation(prepared, options = {})
     for (const ref of consumedRefs)
         recordIndexedShowUsage(ref, eventSource);
     const announcement = fallbackAnnouncement(prepared.fallbackEngineName, selectedEngine);
-    return resultEnvelope(result, selectedEngine, announcement ? [announcement] : [], lowered.notices);
+    return resultEnvelope(result, selectedEngine, announcement ? [announcement] : [], built.notices);
 }
 export async function executeCommandInvocation(options, dispatchOptions = {}) {
     return dispatchPreparedCommandInvocation(await prepareCommandInvocation(options), dispatchOptions);

package/dist/commands/feedback-cli.js

@@ -95,7 +95,6 @@ function appendLessonStrength(refInput, feedbackRef) {
     let mutationStarted = false;
     try {
         withWriteTargetMutation(resolved.target, [filePath], {
-            ignored: "reject",
             purpose: "feedback-lesson-credit",
             message: `Update ${makeBundleRef(bundleId, conceptId)}`,
         }, () => {

package/dist/commands/health/accept-rate.js

@@ -15,7 +15,7 @@
  * same read extended to the accepted/rejected archive.
  */
 import { resolveStashDir } from "../../core/common.js";
-import { isStaleTargetRejection } from "../proposal/proposal-types.js";
+import { isProceduralRejection } from "../proposal/proposal-types.js";
 import { listProposals } from "../proposal/repository.js";
 /**
  * Compute accept-rate-per-source metrics from the proposal store. Defaults to
@@ -32,7 +32,7 @@ export function computeAcceptRateBySource(stashDir) {
                 // A stale-target auto-reject (STALE, R20) is procedural, not a
                 // judgement on the content — counting it would understate the
                 // source's real accept rate for content the drain will re-propose.
-                if (status === "rejected" && isStaleTargetRejection(p))
+                if (status === "rejected" && isProceduralRejection(p))
                     continue;
                 const src = p.source || "(unknown)";
                 const entry = bySource.get(src) ?? { accepted: 0, rejected: 0, pending: 0 };