akm-cli 0.9.17-alpha.6 → 0.9.17-alpha.7

package/dist/storage/repositories/proposals-repository.js

@@ -385,6 +385,10 @@ export function getStateProposal(db, id, stashDir) {
     const row = (stashDir ? db.prepare(sql).get(id, stashDir) : db.prepare(sql).get(id));
     return row ? proposalRowToProposal(row) : undefined;
 }
+/** `(ref, source)` of every proposal, any status, in one stash: no payload is read. */
+export function listProposalRefSources(db, stashDir) {
+    return db.prepare("SELECT ref, source FROM proposals WHERE stash_dir = ?").all(stashDir);
+}
 /**
  * Find PENDING proposal ids in one stash whose id starts with `idPrefix`.
  * Backs the UUID-prefix form of `akm proposal show/accept/... <prefix>` —

package/dist/tasks/backends/cron.js

@@ -7,9 +7,14 @@
 // its other lines untouched:
 //
 //     # akm:task <id> BEGIN
-//     [SCHED] /abs/akm --scheduler-context <descriptor> task run <id> ... > <log> 2>&1
+//     [SCHED] AKM_BUNDLE_DIR=<working stash> /abs/akm task run <id> ... > <log> 2>&1
 //     # akm:task <id> END
 //
+// The row sets its own environment inline, as a `VAR=value` prefix (see
+// `src/tasks/scheduler-invocation.ts`); PATH is the `# akm:env` block. A
+// command over the portable line limit runs `sh <wrapper script>` instead,
+// and the script holds the same environment and argv.
+//
 // The backend reads/writes the user's crontab via `crontab -l` and
 // `crontab -`. Every mutation is one read → modify the akm blocks (and the
 // `# akm:env` PATH header) → one write, with the prior crontab restored when
@@ -32,13 +37,14 @@
 // Tests inject a fake exec so unit tests don't touch the real crontab.
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
+import fs from "node:fs";
 import path from "node:path";
 import { ConfigError } from "../../core/errors.js";
 import { getTaskLogDir } from "../../core/paths.js";
 import { resolveAkmInvocation } from "../resolve-akm-bin.js";
 import { parseSchedule, translateToCron } from "../schedule.js";
 import { schedulerBindingNativeId, schedulerLogicalBindingId } from "../scheduler-binding.js";
-import { buildScheduledBindingInvocation, parsePublicSchedulerInvocation, parseScheduledBindingArgv, resolveScheduledTaskContext, SCHEDULER_CONTEXT_ARG, schedulerContextDescriptor, schedulerContextPath, } from "../scheduler-invocation.js";
+import { buildScheduledInvocation, parseScheduledInvocationArgv, scheduledRowEnvironmentEntries, scheduledRowEnvironmentFrom, } from "../scheduler-invocation.js";
 import { nodeFs, throwIfNotOk } from "./exec-utils.js";
 const BEGIN = (id) => `# akm:task ${assertCronValue(id)} BEGIN`;
 const END = (id) => `# akm:task ${assertCronValue(id)} END`;
@@ -55,9 +61,8 @@ export function CRON_BACKEND(options = {}) {
     const logDir = options.logDir ?? getTaskLogDir();
     const akmArgv = options.akmArgv ?? resolveAkmInvocation().argv;
     const envPath = options.envPath === false ? undefined : (options.envPath ?? process.env.PATH);
-    const scheduledContext = options.scheduledContext ?? resolveScheduledTaskContext();
-    const defaultContextPath = schedulerContextPath(schedulerContextDescriptor(scheduledContext));
-    const lineFor = (task, opts) => buildCronLineParts(task, [...(opts?.binding ?? akmArgv)], logDir, opts?.contextPath ?? defaultContextPath);
+    const readFile = options.fs?.readFile ?? ((file) => fs.readFileSync(file, "utf8"));
+    const lineFor = (task, opts) => buildCronLineParts(task, [...(opts?.binding ?? akmArgv)], logDir, opts?.environment);
     return {
         name: "cron",
         install(task, opts) {
@@ -92,7 +97,7 @@ export function CRON_BACKEND(options = {}) {
         list() {
             const rows = [];
             for (const { id, body } of listBlocks(readCrontab(exec))) {
-                const parsed = extractCronInvocation(body);
+                const parsed = extractCronInvocation(body) ?? extractCronWrapperInvocation(body, readFile);
                 if (!parsed)
                     continue;
                 rows.push({
@@ -102,9 +107,8 @@ export function CRON_BACKEND(options = {}) {
                     signature: normalizeSignature(body),
                     ...(parsed.target !== undefined ? { target: parsed.target } : {}),
                     binding: parsed.binding,
-                    // A pre-0.9.2 row has no descriptor of its own (#881); it reads as
-                    // the current one so ownership resolves and sync rewrites it.
-                    contextPath: parsed.contextPath || defaultContextPath,
+                    ...(parsed.contextPath !== undefined ? { contextPath: parsed.contextPath } : {}),
+                    ...(parsed.environment !== undefined ? { environment: parsed.environment } : {}),
                     invocation: parsed.invocation,
                 });
             }
@@ -117,21 +121,26 @@ export function CRON_BACKEND(options = {}) {
         },
     };
 }
-function buildCronLineParts(task, akmArgv, logDir, contextPath) {
+function buildCronLineParts(task, akmArgv, logDir, environment) {
     const cronExpr = translateToCron(parseSchedule(task.cron, "cron"));
     const nativeId = schedulerBindingNativeId(task);
     const logPath = path.join(logDir, `${nativeId}.log`);
-    const invocation = buildScheduledBindingInvocation(akmArgv, contextPath, task.invocation);
-    const cmd = invocation.argv.map((part) => quoteForCron(part)).join(" ");
+    const argv = buildScheduledInvocation(akmArgv, task.invocation);
+    const variables = scheduledRowEnvironmentEntries(environment);
+    // An assignment prefix: the shell cron hands the line to sets it for this
+    // command only. Only the value is quoted, or the word is not an assignment.
+    const assignments = variables.map(([name, value]) => `${name}=${quoteForCron(value)} `).join("");
+    const cmd = argv.map((part) => quoteForCron(part)).join(" ");
     // #951: truncate (not append) so this bootstrap safety-net file always
     // holds exactly the latest run's raw output. akm's own per-run log
     // (src/tasks/run/task-log.ts) keeps history.
-    const directLine = `${cronExpr} ${cmd} > ${quoteForCron(logPath)} 2>&1`;
+    const directLine = `${cronExpr} ${assignments}${cmd} > ${quoteForCron(logPath)} 2>&1`;
     if (Buffer.byteLength(directLine, "utf8") <= PORTABLE_CRON_LINE_LIMIT)
         return { line: directLine };
     // A command over vixie-cron's MAX_COMMAND is spilled into a short wrapper
     // script under logDir instead of being truncated or refused.
-    const content = `#!/bin/sh\nexec ${invocation.argv.map(quoteForShellScript).join(" ")}\n`;
+    const exports = variables.map(([name, value]) => `export ${name}=${quoteForShellScript(value)}\n`).join("");
+    const content = `#!/bin/sh\n${exports}exec ${argv.map(quoteForShellScript).join(" ")}\n`;
     const contentHash = createHash("sha256").update(content).digest("hex").slice(0, 16);
     const wrapperPath = path.join(logDir, `${CRON_WRAPPER_PREFIX}${nativeId}-${contentHash}.sh`);
     const line = `${cronExpr} sh ${quoteForCron(wrapperPath)} > ${quoteForCron(logPath)} 2>&1`;
@@ -142,8 +151,8 @@ function quoteForShellScript(part) {
         return part;
     return `'${part.replace(/'/g, `'\\''`)}'`;
 }
-export function buildCronLine(task, akmArgv, logDir, contextPath) {
-    return buildCronLineParts(task, akmArgv, logDir, contextPath).line;
+export function buildCronLine(task, akmArgv, logDir, environment) {
+    return buildCronLineParts(task, akmArgv, logDir, environment).line;
 }
 /** The crontab line as it appears inside a block — commented when disabled. */
 export function cronBlockBody(cronLine, enabled) {
@@ -196,46 +205,74 @@ function malformedBlockError(id) {
 export function extractInstalledTarget(body) {
     return extractCronInvocation(body)?.target;
 }
+/**
+ * Parse an installed cron body: its inline `VAR=value` environment, its
+ * launcher, and its public tail — a current row, a row naming a
+ * `--scheduler-context` descriptor (0.9.0 – 0.9.17-alpha.6), or an older
+ * row with neither (#881). This only ever runs on a body already isolated
+ * between akm's own BEGIN/END markers, so no trust extends to unmarked lines.
+ */
 export function extractCronInvocation(body) {
     const line = body.startsWith(DISABLED_PREFIX) ? body.slice(DISABLED_PREFIX.length) : body;
     const fields = splitCronShellWords(line);
     if (fields.length < 6)
         return undefined;
     let commandStart = 5;
-    while (commandStart < fields.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(fields[commandStart]))
+    const variables = {};
+    for (let field = fields[commandStart]; field !== undefined; field = fields[commandStart]) {
+        const assignment = /^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/s.exec(field);
+        if (!assignment)
+            break;
+        variables[assignment[1]] = assignment[2];
         commandStart += 1;
+    }
     // #951: new rows redirect with `>`; rows written before that use `>>`.
     const redirectIndex = fields.findIndex((field, index) => index >= commandStart && (field === ">" || field === ">>"));
     if (redirectIndex === -1)
         return undefined;
-    const tail = fields.slice(commandStart, redirectIndex);
-    const parsed = parseScheduledBindingArgv(tail);
-    if (parsed)
-        return parsed;
-    // Rows written by akm < 0.9.2 have no `--scheduler-context` argument at
-    // all — the akm argv is followed directly by the public `task run …` /
-    // `workflow run …` tail (#881). This only ever runs on a body already
-    // isolated between akm's own BEGIN/END markers, so recognizing the older
-    // shape extends no trust to unmarked crontab lines. A row that DOES carry
-    // the marker but fails to parse is never reinterpreted as legacy.
-    if (tail.includes(SCHEDULER_CONTEXT_ARG))
+    const parsed = parseScheduledInvocationArgv(fields.slice(commandStart, redirectIndex));
+    if (!parsed)
         return undefined;
-    for (let index = 0; index < tail.length - 1; index += 1) {
-        if ((tail[index] === "task" || tail[index] === "workflow") && tail[index + 1] === "run") {
-            const publicInvocation = parsePublicSchedulerInvocation(tail.slice(index));
-            if (!publicInvocation)
-                return undefined;
-            return {
-                binding: tail.slice(0, index),
-                contextPath: "",
-                invocation: publicInvocation.invocation,
-                ...(publicInvocation.target !== undefined ? { target: publicInvocation.target } : {}),
-            };
-        }
+    const environment = scheduledRowEnvironmentFrom(variables);
+    return environment ? { ...parsed, environment } : parsed;
+}
+/**
+ * Parse a row spilled into a wrapper script (`sh <script> > <log> 2>&1`):
+ * the script's `export NAME=value` lines and its `exec` argv. Only akm's own
+ * wrapper scripts are read; one that is gone or does not parse leaves the
+ * row unlisted, as any unparsable row is.
+ */
+export function extractCronWrapperInvocation(body, readFile) {
+    const line = body.startsWith(DISABLED_PREFIX) ? body.slice(DISABLED_PREFIX.length) : body;
+    const fields = splitCronShellWords(line);
+    const script = fields[6];
+    if (fields[5] !== "sh" || !script || !path.basename(script).startsWith(CRON_WRAPPER_PREFIX))
+        return undefined;
+    if (fields[7] !== ">" && fields[7] !== ">>")
+        return undefined;
+    let content;
+    try {
+        content = readFile(script);
     }
-    return undefined;
+    catch {
+        return undefined;
+    }
+    const variables = {};
+    let parsed;
+    for (const scriptLine of content.split("\n")) {
+        const words = splitCronShellWords(scriptLine);
+        const assignment = words[0] === "export" ? /^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/s.exec(words[1] ?? "") : null;
+        if (assignment)
+            variables[assignment[1]] = assignment[2];
+        else if (words[0] === "exec")
+            parsed = parseScheduledInvocationArgv(words.slice(1));
+    }
+    if (!parsed)
+        return undefined;
+    const environment = scheduledRowEnvironmentFrom(variables);
+    return environment ? { ...parsed, environment } : parsed;
 }
-/** Reverse {@link quoteForCron} for a single whitespace-free token. */
+/** Reverse {@link quoteForCron}: sh word splitting, where a backslash is literal inside single quotes. */
 function splitCronShellWords(value) {
     const words = [];
     let current = "";
@@ -246,7 +283,7 @@ function splitCronShellWords(value) {
             quoted = !quoted;
             continue;
         }
-        if (char === "\\" && index + 1 < value.length) {
+        if (!quoted && char === "\\" && index + 1 < value.length) {
             current += value[index + 1];
             index += 1;
             continue;

package/dist/tasks/backends/launchd.js

@@ -17,7 +17,9 @@
  *     when the user is logged out should be installed as system Daemons,
  *     which is out of scope.
  *   • launchd strips the environment; the syncing shell's PATH goes into the
- *     plist's `EnvironmentVariables` so task bodies find the same binaries.
+ *     plist's `EnvironmentVariables` so task bodies find the same binaries,
+ *     next to the AKM directory environment the row sets (see
+ *     `src/tasks/scheduler-invocation.ts`).
  *
  * Tests inject a fake exec + filesystem so the backend can be unit-tested
  * without touching the host launchctl.
@@ -33,7 +35,7 @@ import { warn } from "../../core/warn.js";
 import { resolveAkmInvocation } from "../resolve-akm-bin.js";
 import { parseSchedule, translateToLaunchd } from "../schedule.js";
 import { schedulerBindingNativeId, schedulerLogicalBindingId } from "../scheduler-binding.js";
-import { buildScheduledBindingInvocation, parseScheduledBindingArgv, resolveScheduledTaskContext, schedulerContextDescriptor, schedulerContextPath, } from "../scheduler-invocation.js";
+import { buildScheduledInvocation, parseScheduledInvocationArgv, scheduledRowEnvironmentEntries, scheduledRowEnvironmentFrom, } from "../scheduler-invocation.js";
 import { escapeXml, nodeExec, nodeFs, runOrThrow } from "./exec-utils.js";
 export const LAUNCHD_LABEL_PREFIX = "com.akm.task.";
 const LAUNCHD_AKM_LABEL_RE = /^com\.akm\.task\.[A-Za-z0-9._-]{1,1024}$/u;
@@ -43,9 +45,7 @@ export function LAUNCHD_BACKEND(options = {}) {
     const agentsDir = options.agentsDir ?? defaultAgentsDir();
     const logDir = options.logDir ?? getTaskLogDir();
     const akmArgv = options.akmArgv ?? resolveAkmInvocation().argv;
-    const scheduledContext = options.scheduledContext ?? resolveScheduledTaskContext();
     const envPath = options.envPath === false ? undefined : typeof options.envPath === "string" ? options.envPath : process.env.PATH;
-    const defaultContextPath = schedulerContextPath(schedulerContextDescriptor(scheduledContext));
     const plistPath = (nativeId) => path.join(agentsDir, `${LAUNCHD_LABEL_PREFIX}${nativeId}.plist`);
     const label = (nativeId) => `${LAUNCHD_LABEL_PREFIX}${nativeId}`;
     const target = (nativeId) => `gui/${exec.uid()}/${label(nativeId)}`;
@@ -59,7 +59,7 @@ export function LAUNCHD_BACKEND(options = {}) {
         isOk: (r) => r.status === 0 || isServiceNotFoundResult(r),
         message: (r) => `launchctl bootout failed (exit ${r.status}): ${r.stderr || r.stdout || "no output"}.`,
     });
-    const xmlFor = (task, opts) => buildPlistXml(task, [...(opts?.binding ?? akmArgv)], logDir, opts?.contextPath ?? defaultContextPath, envPath);
+    const xmlFor = (task, opts) => buildPlistXml(task, [...(opts?.binding ?? akmArgv)], logDir, opts?.environment, envPath);
     return {
         name: "launchd",
         install(task, opts) {
@@ -130,7 +130,8 @@ export function LAUNCHD_BACKEND(options = {}) {
                     signature: launchdFingerprint(raw, enabled, loaded),
                     ...(parsed.target !== undefined ? { target: parsed.target } : {}),
                     binding: parsed.binding,
-                    contextPath: parsed.contextPath,
+                    ...(parsed.contextPath !== undefined ? { contextPath: parsed.contextPath } : {}),
+                    ...(parsed.environment !== undefined ? { environment: parsed.environment } : {}),
                     invocation: parsed.invocation,
                 });
             }
@@ -150,7 +151,16 @@ export function extractPlistInvocation(xml) {
     if (!block)
         return undefined;
     const args = [...block[1].matchAll(/<string>([\s\S]*?)<\/string>/g)].map((m) => decodeXmlEntities(m[1]));
-    return parseScheduledBindingArgv(args);
+    const parsed = parseScheduledInvocationArgv(args);
+    if (!parsed)
+        return undefined;
+    const variables = {};
+    const dict = xml.match(/<key>EnvironmentVariables<\/key>\s*<dict>([\s\S]*?)<\/dict>/)?.[1] ?? "";
+    for (const entry of dict.matchAll(/<key>([^<]*)<\/key>\s*<string>([\s\S]*?)<\/string>/g)) {
+        variables[decodeXmlEntities(entry[1])] = decodeXmlEntities(entry[2]);
+    }
+    const environment = scheduledRowEnvironmentFrom(variables);
+    return environment ? { ...parsed, environment } : parsed;
 }
 function decodeXmlEntities(value) {
     return value
@@ -161,22 +171,25 @@ function decodeXmlEntities(value) {
         .replaceAll("&amp;", "&");
 }
 // ── XML builder (exported for tests) ────────────────────────────────────────
-function renderPlistEnvironment(envPath) {
-    if (!envPath)
+function renderPlistEnvironment(envPath, environment) {
+    const variables = [
+        ...(envPath ? [["PATH", envPath]] : []),
+        ...scheduledRowEnvironmentEntries(environment),
+    ];
+    if (variables.length === 0)
         return "";
     return [
         "  <key>EnvironmentVariables</key>",
         "  <dict>",
-        "    <key>PATH</key>",
-        `    <string>${escapeXml(envPath)}</string>`,
+        ...variables.flatMap(([name, value]) => [`    <key>${name}</key>`, `    <string>${escapeXml(value)}</string>`]),
         "  </dict>",
         "",
     ].join("\n");
 }
-export function buildPlistXml(task, akmArgv, logDir, contextPath, envPath) {
+export function buildPlistXml(task, akmArgv, logDir, environment, envPath) {
     const trigger = translateToLaunchd(parseSchedule(task.cron, "launchd"));
-    const invocation = buildScheduledBindingInvocation(akmArgv, contextPath, task.invocation);
-    const programArgs = invocation.argv.map((a) => `      <string>${escapeXml(a)}</string>`).join("\n");
+    const argv = buildScheduledInvocation(akmArgv, task.invocation);
+    const programArgs = argv.map((a) => `      <string>${escapeXml(a)}</string>`).join("\n");
     const nativeId = schedulerBindingNativeId(task);
     const logPath = path.join(logDir, `${nativeId}.log`);
     const xml = launchdTemplate
@@ -184,7 +197,7 @@ export function buildPlistXml(task, akmArgv, logDir, contextPath, envPath) {
         .replace("{{LABEL}}", LAUNCHD_LABEL_PREFIX + escapeXml(nativeId))
         .replace("{{PROGRAM_ARGS}}", programArgs)
         .replaceAll("{{LOG_PATH}}", escapeXml(logPath))
-        .replace("{{ENV_VARS}}", renderPlistEnvironment(envPath))
+        .replace("{{ENV_VARS}}", () => renderPlistEnvironment(envPath, environment))
         .replace("{{TRIGGER_XML}}", renderLaunchdTrigger(trigger));
     for (const char of xml) {
         const code = char.codePointAt(0) ?? 0;

package/dist/tasks/backends/schtasks.js

@@ -23,7 +23,11 @@
  *     `TaskName,Next Run Time,Status` — so the regex anchors on the task
  *     name as the leading quoted field.
  *   • Task Scheduler runs a task with the account's own environment, so
- *     PATH is not carried anywhere; the descriptor holds directories only.
+ *     PATH is not carried anywhere. The Exec action has no environment of
+ *     its own: the AKM directory environment a row sets (see
+ *     `src/tasks/scheduler-invocation.ts`) is a `$env:NAME='value';`
+ *     assignment ahead of the call operator in the PowerShell command,
+ *     inherited by the akm process it starts.
  *
  * Tests inject a fake exec + filesystem.
  */
@@ -37,7 +41,7 @@ import { getTaskLogDir } from "../../core/paths.js";
 import { resolveAkmInvocation } from "../resolve-akm-bin.js";
 import { parseSchedule, translateToSchtasks } from "../schedule.js";
 import { schedulerBindingNativeId, schedulerLogicalBindingId } from "../scheduler-binding.js";
-import { buildScheduledBindingInvocation, parseScheduledBindingArgv, resolveScheduledTaskContext, schedulerContextDescriptor, schedulerContextPath, } from "../scheduler-invocation.js";
+import { buildScheduledInvocation, parseScheduledInvocationArgv, scheduledRowEnvironmentEntries, scheduledRowEnvironmentFrom, } from "../scheduler-invocation.js";
 import { escapeXml, nodeExec, nodeFs, normalizeXmlForUtf16File, runOrThrow, } from "./exec-utils.js";
 export const DEFAULT_FOLDER_PREFIX = "\\akm\\";
 const SIGNATURE_PREFIX = "akm:v1:";
@@ -47,15 +51,13 @@ export function SCHTASKS_BACKEND(options = {}) {
     const akmArgv = options.akmArgv ?? resolveAkmInvocation().argv;
     const logDir = options.logDir ?? getTaskLogDir();
     const folder = options.folderPrefix ?? DEFAULT_FOLDER_PREFIX;
-    const scheduledContext = options.scheduledContext ?? resolveScheduledTaskContext();
-    const defaultContextPath = schedulerContextPath(schedulerContextDescriptor(scheduledContext));
     const userSid = options.userSid ?? resolveCurrentUserSid(exec);
     const taskName = (nativeId) => `${folder}${nativeId}`;
     const xmlFor = (task, opts) => buildSchtasksXml(task, akmArgv, logDir, {
         folderPrefix: folder,
-        contextPath: opts?.contextPath ?? defaultContextPath,
         userSid,
         binding: [...(opts?.binding ?? akmArgv)],
+        ...(opts?.environment ? { environment: opts.environment } : {}),
     });
     const queryXml = (nativeId) => runOrThrow(exec, ["schtasks", "/Query", "/TN", taskName(nativeId), "/XML"], {
         message: (result) => `schtasks /Query /XML for "${taskName(nativeId)}" failed (exit ${result.status}): ${result.stderr || result.stdout || "no output"}.`,
@@ -116,7 +118,8 @@ export function SCHTASKS_BACKEND(options = {}) {
                     signature: taskXmlSignature(xml),
                     ...(parsed.target !== undefined ? { target: parsed.target } : {}),
                     binding: parsed.binding,
-                    contextPath: parsed.contextPath,
+                    ...(parsed.contextPath !== undefined ? { contextPath: parsed.contextPath } : {}),
+                    ...(parsed.environment !== undefined ? { environment: parsed.environment } : {}),
                     invocation: parsed.invocation,
                 });
             }
@@ -139,7 +142,16 @@ export function extractSchtasksInvocation(xml) {
     const invocationStart = findPowerShellInvocationOperator(commandLine);
     if (invocationStart === undefined)
         return undefined;
-    return parseScheduledBindingArgv(parsePowerShellSingleQuotedArgs(commandLine, invocationStart + 1));
+    const parsed = parseScheduledInvocationArgv(parsePowerShellSingleQuotedArgs(commandLine, invocationStart + 1));
+    if (!parsed)
+        return undefined;
+    const variables = {};
+    const assignments = commandLine.slice(0, invocationStart);
+    for (const assignment of assignments.matchAll(/\$env:([A-Za-z_][A-Za-z0-9_]*)='((?:[^']|'')*)'\s*;/g)) {
+        variables[assignment[1]] = assignment[2].replaceAll("''", "'");
+    }
+    const environment = scheduledRowEnvironmentFrom(variables);
+    return environment ? { ...parsed, environment } : parsed;
 }
 function findPowerShellInvocationOperator(script) {
     let inSingleQuote = false;
@@ -196,8 +208,11 @@ export function buildSchtasksXml(task, akmArgv, logDir, options) {
     const folder = options.folderPrefix ?? DEFAULT_FOLDER_PREFIX;
     const now = options.now ? options.now() : new Date();
     const trigger = translateToSchtasks(parseSchedule(task.cron, "schtasks"));
-    const invocation = buildScheduledBindingInvocation(options.binding ?? akmArgv, options.contextPath, task.invocation);
-    const script = `& ${invocation.argv.map((arg) => quotePowerShell(arg)).join(" ")}; exit $LASTEXITCODE`;
+    const argv = buildScheduledInvocation(options.binding ?? akmArgv, task.invocation);
+    const assignments = scheduledRowEnvironmentEntries(options.environment)
+        .map(([name, value]) => `$env:${name}=${quotePowerShell(value)}; `)
+        .join("");
+    const script = `${assignments}& ${argv.map((arg) => quotePowerShell(arg)).join(" ")}; exit $LASTEXITCODE`;
     const command = "powershell.exe";
     const args = ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", script].map(quoteArg).join(" ");
     const nativeId = schedulerBindingNativeId(task);
@@ -216,7 +231,7 @@ export function buildSchtasksXml(task, akmArgv, logDir, options) {
         .replace('<Principal id="Author">', `<Principal id="Author">\n      <UserId>${escapeXml(options.userSid)}</UserId>`)
         .replace("{{ENABLED}}", task.enabled ? "true" : "false")
         .replace("{{COMMAND}}", escapeXml(command))
-        .replace("{{ARGS}}", escapeXml(args))
+        .replace("{{ARGS}}", () => escapeXml(args))
         .replace("{{LOG_PATH}}", escapeXml(logPath));
 }
 function renderSchtasksTrigger(trigger, now) {

package/dist/tasks/run/load-task.js

@@ -100,7 +100,7 @@ export async function loadPreparedTask(id, options) {
         bundleRoot: bundleDir,
         config,
         // Agent profiles build child env from an allowlist, so freeze the closed
-        // scheduler-restored AKM directory context before command preparation.
+        // AKM directory context the scheduled row set before command preparation.
         ...(options.scheduled ? { schedulerContext: scheduledTaskContextEnv() } : {}),
         resolveAsset: async ({ bundle, type, name }) => {
             if (bundle === bundleName) {

package/dist/tasks/scheduler-binding.js

@@ -6,8 +6,10 @@
  * contract itself.
  *
  * A binding carries only stable source identity, trigger identity, and the
- * public CLI tail. Source content, action inputs, environment values, and
- * credentials never cross this boundary or reach an OS scheduler.
+ * public CLI tail; its install options add the launcher and the AKM
+ * directory environment the row sets inline. Source content, action inputs,
+ * task environment values, and credentials never cross this boundary or
+ * reach an OS scheduler.
  */
 import { createHash } from "node:crypto";
 import { bundleRefToString, parseBundleRef } from "../core/asset/asset-ref.js";