akm-cli 0.9.17-alpha.8 → 0.9.17-alpha.9

package/dist/scripts/akm-migrate-node.js

@@ -27255,7 +27255,8 @@ var STATE_MIGRATION_SAFETY_BY_ID = Object.freeze({
   "025-task-history-vocabulary-backfill": "data-preserving-rebuild",
   "026-proposals-strip-legacy-fragment-refs": "data-preserving-rebuild",
   "027-extract-sessions-seen-harness-rename": "data-preserving-rebuild",
-  "028-improve-ledger": "historical-destructive"
+  "028-improve-ledger": "historical-destructive",
+  "029-improve-ledger-content-hash": "additive"
 });
 var STATE_MIGRATIONS = [
   {
@@ -27993,6 +27994,12 @@ var STATE_MIGRATIONS = [
       DROP TABLE IF EXISTS improve_cycle_metrics;
       DROP TABLE IF EXISTS canary_queries;
     `
+  },
+  {
+    id: "029-improve-ledger-content-hash",
+    up: `
+      ALTER TABLE improve_ledger ADD COLUMN content_hash TEXT DEFAULT NULL;
+    `
   }
 ];
 assertMigrationRegistry(STATE_MIGRATIONS);
@@ -28224,7 +28231,6 @@ var BUILTIN_IMPROVE_STRATEGY_NAMES = [
   "default",
   "quick",
   "thorough",
-  "graph-refresh",
   "consolidate",
   "catchup",
   "reflect-distill",
@@ -28235,7 +28241,6 @@ var IMPROVE_PROCESS_ENGINE_CAPABILITIES = {
   distill: "llm",
   consolidate: "llm",
   memoryInference: "llm",
-  graphExtraction: "llm",
   extract: "llm",
   validation: "llm",
   triage: "runner",
@@ -28322,7 +28327,6 @@ var INTERESTING_DELTA_PATHS = [
   "improve.memoryInference.written",
   "improve.memoryInference.yieldRate",
   "improve.memoryInference.skippedNoFacts",
-  "improve.graphExtraction.failures",
   "improve.autoAccept.promoted",
   "improve.autoAccept.validationFailed",
   "improve.coverage.acceptedProposals",
@@ -28369,13 +28373,12 @@ function renderRunsDetailMd(runs) {
     "distill_q/llm-fail/judge/validator/cfg/skip",
     "cons_proc/promo/merge/del",
     "mem_cons/written/skip",
-    "graph_f/e/r",
     "orphans",
     "lint_f/fl",
     "result_status"
   ];
   const rows = runs.map((r) => {
-    const totalActions = r.actions.reflect.ok + r.actions.reflect.failed + r.actions.reflect.cooldown + r.actions.reflect.skipped + r.actions.distill.queued + r.actions.distill.llmFailed + r.actions.distill.judgeRejected + r.actions.distill.validatorRejected + r.actions.distill.configDisabled + r.actions.distill.skipped + r.actions.memoryPrune + r.actions.memoryInference + r.actions.graphExtraction + r.actions.error;
+    const totalActions = r.actions.reflect.ok + r.actions.reflect.failed + r.actions.reflect.cooldown + r.actions.reflect.skipped + r.actions.distill.queued + r.actions.distill.llmFailed + r.actions.distill.judgeRejected + r.actions.distill.validatorRejected + r.actions.distill.configDisabled + r.actions.distill.skipped + r.actions.memoryPrune + r.actions.memoryInference + r.actions.error;
     return [
       r.startedAt,
       String(r.ok),
@@ -28385,7 +28388,6 @@ function renderRunsDetailMd(runs) {
       `${r.actions.distill.queued}/${r.actions.distill.llmFailed}/${r.actions.distill.judgeRejected}/${r.actions.distill.validatorRejected}/${r.actions.distill.configDisabled}/${r.actions.distill.skipped}`,
       `${r.consolidation.processed}/${r.consolidation.promoted}/${r.consolidation.merged}/${r.consolidation.deleted}`,
       `${r.memoryInference.considered}/${r.memoryInference.written}/${r.memoryInference.skippedNoFacts}`,
-      `${r.graphExtraction.extractedFiles}/${r.graphExtraction.entities}/${r.graphExtraction.relations}`,
       String(r.orphansPurged),
       `${r.lintFixed}/${r.lintFlagged}`,
       r.resultStatus ?? "valid"
@@ -28400,8 +28402,6 @@ function renderWindowCompareMd(windows, deltas) {
   const badIfPositive = new Set([
     "improve.actions.reflect.failed",
     "improve.actions.distill.llmFailed",
-    "improve.graphExtraction.failures",
-    "improve.graphExtraction.nonArrayBatchFailures",
     "improve.wallTime.medianMs",
     "improve.wallTime.p95Ms",
     "improve.memoryInference.skippedNoFacts"
@@ -28522,7 +28522,11 @@ function shapeProposalProducerOutput(result, detail) {
 }
 function shapeProposalEntry(entry, detail) {
   if (detail === "brief") {
-    return pickFields(entry, ["id", "ref", "status", "source", "createdAt"]);
+    const retirement = entry.retirement;
+    return {
+      ...pickFields(entry, ["id", "ref", "status", "source", "createdAt"]),
+      ...retirement?.continuityRisk ? { continuityRisk: true } : {}
+    };
   }
   if (detail === "normal") {
     return pickFields(entry, [
@@ -28535,7 +28539,8 @@ function shapeProposalEntry(entry, detail) {
       "updatedAt",
       "confidence",
       "gateDecision",
-      "review"
+      "review",
+      "retirement"
     ]);
   }
   return pickFields(entry, [
@@ -28549,7 +28554,11 @@ function shapeProposalEntry(entry, detail) {
     "confidence",
     "gateDecision",
     "payload",
-    "review"
+    "review",
+    "retirement",
+    "retiredArchive",
+    "promotionSource",
+    "promotionSourceHash"
   ]);
 }
 function shapeProposalListOutput(result, detail) {
@@ -28796,7 +28805,6 @@ function shapeShowOutput(result, detail, shape = "human") {
       "workflowParameters",
       "steps",
       "keys",
-      "related",
       "links",
       ...FRAGMENT_PROVENANCE_FIELDS,
       ...FRAGMENT_CONTEXT_FIELDS
@@ -28818,7 +28826,6 @@ function shapeShowOutput(result, detail, shape = "human") {
       "run",
       "origin",
       "keys",
-      "related",
       "links",
       ...FRAGMENT_PROVENANCE_FIELDS,
       ...FRAGMENT_CONTEXT_FIELDS
@@ -28847,7 +28854,6 @@ function shapeShowOutput(result, detail, shape = "human") {
     "cwd",
     "activeRun",
     "keys",
-    "related",
     "links",
     ...FRAGMENT_PROVENANCE_FIELDS,
     ...FRAGMENT_CONTEXT_FIELDS,
@@ -29989,13 +29995,6 @@ Warnings (${warnings.length}):`;
       out += `
   - ${String(message)}`;
   }
-  const notices = Array.isArray(indexResult.notices) ? indexResult.notices : [];
-  for (const notice of notices) {
-    const severity = notice.severity === "info" ? "info" : "warning";
-    const field = typeof notice.field === "string" ? ` field=${notice.field}` : "";
-    out += `
-  notice[${severity}] ${notice.code} adapter=${notice.adapter}${field}` + (notice.message ? `: ${notice.message}` : "");
-  }
   const verification = indexResult.verification;
   if (verification?.ok === false && verification.message) {
     out += `
@@ -30410,7 +30409,10 @@ Generate one with \`akm improve <ref>\` or \`akm proposal new <type> <name> --ta
     const created = String(p.createdAt);
     const gate = formatGateDecisionSummary(p.gateDecision);
     const gateSuffix = gate ? `  ${gate}` : "";
-    lines.push(`${id}  [${status}] ${ref}  source=${source}  ${created}${gateSuffix}`);
+    const retirement = p.retirement;
+    const flagged = p.continuityRisk === true || Boolean(retirement?.continuityRisk);
+    const continuitySuffix = flagged ? "  ⚠ continuity-risk" : "";
+    lines.push(`${id}  [${status}] ${ref}  source=${source}  ${created}${gateSuffix}${continuitySuffix}`);
   }
   return lines.join(`
 `).trimEnd();
@@ -30450,6 +30452,30 @@ function formatProposalShowPlain(r) {
     if (review.decidedAt)
       lines.push(`review.decidedAt: ${String(review.decidedAt)}`);
   }
+  const retirement = p.retirement;
+  if (retirement) {
+    lines.push(`retire: ${String(retirement.retiredRef)} -> ${String(retirement.successorRef)}`);
+    lines.push(`retire.label: ${String(retirement.judgeLabel)} (cosine=${String(retirement.cosine)})`);
+    lines.push(`retire.reason: ${String(retirement.judgeReason)}`);
+    const continuityRisk = retirement.continuityRisk;
+    if (continuityRisk) {
+      const failingQueries = typeof continuityRisk.failingQueries === "number" ? continuityRisk.failingQueries : 0;
+      const unverifiedQueries = typeof continuityRisk.unverifiedQueries === "number" ? continuityRisk.unverifiedQueries : 0;
+      const summary = [];
+      if (failingQueries > 0) {
+        summary.push(`${failingQueries} of the retired asset's own quer${failingQueries === 1 ? "y" : "ies"} would not have found the successor top 10`);
+      }
+      if (unverifiedQueries > 0) {
+        summary.push(`${unverifiedQueries} quer${unverifiedQueries === 1 ? "y" : "ies"} unverified (search failed or used the keyword-only fallback)`);
+      }
+      lines.push(`retire.continuityRisk: ${summary.join("; ")} — excluded from bulk accept`);
+      const ranks = Array.isArray(continuityRisk.ranks) ? continuityRisk.ranks : [];
+      for (const rank of ranks) {
+        const successorRank = rank.successorRank === null || rank.successorRank === undefined ? "absent from top 10" : `#${String(rank.successorRank)}`;
+        lines.push(`  - "${String(rank.query)}": retired #${String(rank.retiredRank)}, successor ${successorRank}`);
+      }
+    }
+  }
   const validation = r.validation;
   if (validation) {
     const findings = Array.isArray(validation.findings) ? validation.findings : [];
@@ -30843,19 +30869,6 @@ function formatShowPlain(r, detail) {
     if (r.schemaVersion !== undefined)
       lines.push(`schemaVersion: ${String(r.schemaVersion)}`);
   }
-  const related = typeof r.related === "object" && r.related !== null ? r.related : undefined;
-  const relatedHits = related && Array.isArray(related.hits) ? related.hits : [];
-  if (related) {
-    lines.push("");
-    lines.push(`related: ${String(related.total ?? relatedHits.length)}`);
-    for (const hit of relatedHits) {
-      lines.push(`  - ${String(hit.type ?? "?")}: ${formatRelatedLabel(hit)}`);
-      const shared = Array.isArray(hit.sharedEntities) ? hit.sharedEntities.map(String) : [];
-      if (shared.length > 0)
-        lines.push(`    shared: ${shared.join(", ")}`);
-      lines.push(`    relationCount: ${String(hit.relationCount ?? 0)}`);
-    }
-  }
   const links = typeof r.links === "object" && r.links !== null ? r.links : undefined;
   if (links) {
     lines.push("");
@@ -30905,13 +30918,6 @@ function formatShowPlain(r, detail) {
   return lines.length > 0 ? lines.join(`
 `) : null;
 }
-function formatRelatedLabel(hit) {
-  const ref = typeof hit.ref === "string" ? hit.ref : undefined;
-  if (ref)
-    return ref;
-  const pathValue = typeof hit.path === "string" ? hit.path : "?";
-  return pathValue.split("/").pop() ?? pathValue;
-}
 // src/output/text/workflow-format.ts
 function formatWorkflowListPlain(result) {
   const runs = Array.isArray(result.runs) ? result.runs : [];
@@ -31233,9 +31239,6 @@ var catchup_default = {
     memoryInference: {
       enabled: false
     },
-    graphExtraction: {
-      enabled: false
-    },
     extract: {
       enabled: false
     },
@@ -31267,7 +31270,6 @@ var consolidate_default = {
     distill: { enabled: false },
     consolidate: { enabled: true, allowedTypes: ["memory"], maxChunkSize: 25 },
     memoryInference: { enabled: false },
-    graphExtraction: { enabled: false },
     extract: { enabled: false },
     triage: { enabled: false },
     validation: { enabled: false },
@@ -31277,7 +31279,7 @@ var consolidate_default = {
 };
 // src/assets/improve-strategies/default.json
 var default_default = {
-  description: "Standard improve pass — reflect, distill, advisory consolidation, graph extraction, and validation. Memory inference is listed below but only runs when experimental.improveAutonomy is set; improve-stage extract and proactive maintenance off.",
+  description: "Standard improve pass — reflect, distill, consolidation (promotion plus the reviewed pair-pass retire/supersede proposals), and validation. Memory inference is listed below but only runs when experimental.improveAutonomy is set; improve-stage extract and proactive maintenance off.",
   processes: {
     reflect: {
       enabled: true,
@@ -31287,7 +31289,6 @@ var default_default = {
     distill: { enabled: true, allowedTypes: ["memory"], requirePlannedRefs: true },
     consolidate: { enabled: true, allowedTypes: ["memory"] },
     memoryInference: { enabled: true },
-    graphExtraction: { enabled: true },
     extract: { enabled: false, triage: { enabled: true, minScore: 2 } },
     validation: { enabled: true },
     proactiveMaintenance: { enabled: false, dueDays: 30, maxPerRun: 15 },
@@ -31295,25 +31296,9 @@ var default_default = {
   },
   sync: { enabled: true, push: true }
 };
-// src/assets/improve-strategies/graph-refresh.json
-var graph_refresh_default = {
-  description: "Full-corpus graph extraction pass — rebuilds graph relationships across all stash files. Disables all other sub-processes. Use via `akm improve --strategy graph-refresh` or the embedded `graph-refresh-weekly` task.",
-  processes: {
-    reflect: { enabled: false },
-    distill: { enabled: false },
-    consolidate: { enabled: false },
-    memoryInference: { enabled: false },
-    graphExtraction: { enabled: true, fullScan: true },
-    extract: { enabled: false },
-    triage: { enabled: false },
-    validation: { enabled: false },
-    proactiveMaintenance: { enabled: false }
-  },
-  sync: { enabled: true, push: true }
-};
 // src/assets/improve-strategies/proactive-maintenance.json
 var proactive_maintenance_default = {
-  description: "Opt-in proactive-maintenance pass — reflect, distill, proposal triage (promote, high budget), and the proactive-maintenance lane (maxPerRun 100); consolidate/memoryInference/graphExtraction/extract off. Sync disabled: an interrupted run would otherwise leave an uncommitted backlog.",
+  description: "Opt-in proactive-maintenance pass — reflect, distill, proposal triage (promote, high budget), and the proactive-maintenance lane (maxPerRun 100); consolidate/memoryInference/extract off. Sync disabled: an interrupted run would otherwise leave an uncommitted backlog.",
   processes: {
     reflect: {
       enabled: true,
@@ -31322,7 +31307,6 @@ var proactive_maintenance_default = {
     distill: { enabled: true, allowedTypes: ["memory"] },
     consolidate: { enabled: false },
     memoryInference: { enabled: false },
-    graphExtraction: { enabled: false },
     extract: { enabled: false },
     validation: { enabled: false },
     triage: {
@@ -31339,7 +31323,7 @@ var proactive_maintenance_default = {
 };
 // src/assets/improve-strategies/quick.json
 var quick_default = {
-  description: "Reflect-only pass — no extract, distill, consolidate, memoryInference, or graphExtraction.",
+  description: "Reflect-only pass — no extract, distill, consolidate, or memoryInference.",
   processes: {
     reflect: {
       enabled: true,
@@ -31349,7 +31333,6 @@ var quick_default = {
     distill: { enabled: false },
     consolidate: { enabled: false },
     memoryInference: { enabled: false },
-    graphExtraction: { enabled: false },
     triage: { enabled: false },
     validation: { enabled: false },
     proactiveMaintenance: { enabled: false }
@@ -31358,7 +31341,7 @@ var quick_default = {
 };
 // src/assets/improve-strategies/reflect-distill.json
 var reflect_distill_default = {
-  description: "Reflect + distill pass — reflect, distill, memoryInference, and proposal triage (promote); proactiveMaintenance/consolidate/graphExtraction/extract off. Sync disabled: an interrupted run would otherwise leave an uncommitted backlog.",
+  description: "Reflect + distill pass — reflect, distill, memoryInference, and proposal triage (promote); proactiveMaintenance/consolidate/extract off. Sync disabled: an interrupted run would otherwise leave an uncommitted backlog.",
   processes: {
     reflect: {
       enabled: true,
@@ -31367,7 +31350,6 @@ var reflect_distill_default = {
     distill: { enabled: true, allowedTypes: ["memory"], requirePlannedRefs: false },
     consolidate: { enabled: false },
     memoryInference: { enabled: true },
-    graphExtraction: { enabled: false },
     extract: {
       enabled: false,
       timeoutMs: 300000,
@@ -31408,9 +31390,6 @@ var thorough_default = {
     memoryInference: {
       enabled: true
     },
-    graphExtraction: {
-      enabled: true
-    },
     extract: {
       enabled: false,
       triage: {
@@ -31441,607 +31420,134 @@ var thorough_default = {
   }
 };
 
-// src/core/config/config.ts
-import fs10 from "node:fs";
-import os2 from "node:os";
-import path14 from "node:path";
-import { isDeepStrictEqual } from "node:util";
+// node_modules/zod/v3/external.js
+var exports_external = {};
+__export(exports_external, {
+  void: () => voidType,
+  util: () => util,
+  unknown: () => unknownType,
+  union: () => unionType,
+  undefined: () => undefinedType,
+  tuple: () => tupleType,
+  transformer: () => effectsType,
+  symbol: () => symbolType,
+  string: () => stringType,
+  strictObject: () => strictObjectType,
+  setErrorMap: () => setErrorMap,
+  set: () => setType,
+  record: () => recordType,
+  quotelessJson: () => quotelessJson,
+  promise: () => promiseType,
+  preprocess: () => preprocessType,
+  pipeline: () => pipelineType,
+  ostring: () => ostring,
+  optional: () => optionalType,
+  onumber: () => onumber,
+  oboolean: () => oboolean,
+  objectUtil: () => objectUtil,
+  object: () => objectType,
+  number: () => numberType,
+  nullable: () => nullableType,
+  null: () => nullType,
+  never: () => neverType,
+  nativeEnum: () => nativeEnumType,
+  nan: () => nanType,
+  map: () => mapType,
+  makeIssue: () => makeIssue,
+  literal: () => literalType,
+  lazy: () => lazyType,
+  late: () => late,
+  isValid: () => isValid,
+  isDirty: () => isDirty,
+  isAsync: () => isAsync,
+  isAborted: () => isAborted,
+  intersection: () => intersectionType,
+  instanceof: () => instanceOfType,
+  getParsedType: () => getParsedType,
+  getErrorMap: () => getErrorMap,
+  function: () => functionType,
+  enum: () => enumType,
+  effect: () => effectsType,
+  discriminatedUnion: () => discriminatedUnionType,
+  defaultErrorMap: () => en_default,
+  datetimeRegex: () => datetimeRegex,
+  date: () => dateType,
+  custom: () => custom,
+  coerce: () => coerce,
+  boolean: () => booleanType,
+  bigint: () => bigIntType,
+  array: () => arrayType,
+  any: () => anyType,
+  addIssueToContext: () => addIssueToContext,
+  ZodVoid: () => ZodVoid,
+  ZodUnknown: () => ZodUnknown,
+  ZodUnion: () => ZodUnion,
+  ZodUndefined: () => ZodUndefined,
+  ZodType: () => ZodType,
+  ZodTuple: () => ZodTuple,
+  ZodTransformer: () => ZodEffects,
+  ZodSymbol: () => ZodSymbol,
+  ZodString: () => ZodString,
+  ZodSet: () => ZodSet,
+  ZodSchema: () => ZodType,
+  ZodRecord: () => ZodRecord,
+  ZodReadonly: () => ZodReadonly,
+  ZodPromise: () => ZodPromise,
+  ZodPipeline: () => ZodPipeline,
+  ZodParsedType: () => ZodParsedType,
+  ZodOptional: () => ZodOptional,
+  ZodObject: () => ZodObject,
+  ZodNumber: () => ZodNumber,
+  ZodNullable: () => ZodNullable,
+  ZodNull: () => ZodNull,
+  ZodNever: () => ZodNever,
+  ZodNativeEnum: () => ZodNativeEnum,
+  ZodNaN: () => ZodNaN,
+  ZodMap: () => ZodMap,
+  ZodLiteral: () => ZodLiteral,
+  ZodLazy: () => ZodLazy,
+  ZodIssueCode: () => ZodIssueCode,
+  ZodIntersection: () => ZodIntersection,
+  ZodFunction: () => ZodFunction,
+  ZodFirstPartyTypeKind: () => ZodFirstPartyTypeKind,
+  ZodError: () => ZodError,
+  ZodEnum: () => ZodEnum,
+  ZodEffects: () => ZodEffects,
+  ZodDiscriminatedUnion: () => ZodDiscriminatedUnion,
+  ZodDefault: () => ZodDefault,
+  ZodDate: () => ZodDate,
+  ZodCatch: () => ZodCatch,
+  ZodBranded: () => ZodBranded,
+  ZodBoolean: () => ZodBoolean,
+  ZodBigInt: () => ZodBigInt,
+  ZodArray: () => ZodArray,
+  ZodAny: () => ZodAny,
+  Schema: () => ZodType,
+  ParseStatus: () => ParseStatus,
+  OK: () => OK,
+  NEVER: () => NEVER,
+  INVALID: () => INVALID,
+  EMPTY_PATH: () => EMPTY_PATH,
+  DIRTY: () => DIRTY,
+  BRAND: () => BRAND
+});
 
-// src/core/extra-params.ts
-var EXTRA_PARAMS_PROTECTED_TOP_LEVEL_KEYS = [
-  "model",
-  "messages",
-  "temperature",
-  "maxtokens",
-  "responseformat",
-  "stream",
-  "streamoptions",
-  "enablethinking",
-  "reasoningeffort",
-  "chattemplatekwargs"
-];
-var EXTRA_PARAMS_CREDENTIAL_KEYS = [
-  "authorization",
-  "headers",
-  "apikey",
-  "token",
-  "password",
-  "secret",
-  "cookie",
-  "setcookie"
-];
-var PROTECTED_TOP_LEVEL_KEYS = new Set(EXTRA_PARAMS_PROTECTED_TOP_LEVEL_KEYS);
-var CREDENTIAL_KEYS = new Set(EXTRA_PARAMS_CREDENTIAL_KEYS);
-var LEGACY_EXTRA_PARAMS_FIELD = {
-  model: "model",
-  temperature: "temperature",
-  maxtokens: "maxTokens",
-  enablethinking: "enableThinking",
-  reasoningeffort: "reasoningEffort"
-};
-var LIFTABLE_EXTRA_PARAMS_KEYS = new Set(["temperature", "maxtokens", "enablethinking", "reasoningeffort"]);
-var EXTRA_PARAMS_NO_FIELD_REMEDY = {
-  messages: "AKM builds the request messages internally — remove it from extraParams",
-  responseformat: "AKM controls the response format internally — remove it from extraParams",
-  stream: "AKM controls streaming internally — remove it from extraParams",
-  streamoptions: "AKM controls streaming internally — remove it from extraParams",
-  chattemplatekwargs: "set engines.<name>.enableThinking instead of chat_template_kwargs.enable_thinking"
-};
-function protectedKeyRemedy(normalized) {
-  const field = LEGACY_EXTRA_PARAMS_FIELD[normalized];
-  if (field) {
-    const note = normalized === "reasoningeffort" ? " (moved to a first-class field in 0.9.2)" : "";
-    return `set engines.<name>.${field} instead${note}`;
-  }
-  return EXTRA_PARAMS_NO_FIELD_REMEDY[normalized];
-}
-function normalizeExtraParamKey(key) {
-  return key.toLowerCase().replace(/[^a-z0-9]/g, "");
-}
-function validateExtraParams(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return [{ path: [], message: "must be an object" }];
+// node_modules/zod/v3/helpers/util.js
+var util;
+(function(util2) {
+  util2.assertEqual = (_) => {};
+  function assertIs(_arg) {}
+  util2.assertIs = assertIs;
+  function assertNever2(_x) {
+    throw new Error;
   }
-  const issues = [];
-  const seen = new WeakSet;
-  const visit2 = (entry, path12) => {
-    if (Array.isArray(entry)) {
-      if (seen.has(entry))
-        return;
-      seen.add(entry);
-      entry.forEach((child, index) => {
-        visit2(child, [...path12, index]);
-      });
-      return;
-    }
-    if (!entry || typeof entry !== "object")
-      return;
-    if (seen.has(entry))
-      return;
-    seen.add(entry);
-    for (const [key, child] of Object.entries(entry)) {
-      const normalized = normalizeExtraParamKey(key);
-      if (path12.length === 0 && PROTECTED_TOP_LEVEL_KEYS.has(normalized)) {
-        const remedy = protectedKeyRemedy(normalized);
-        issues.push({
-          path: [key],
-          message: remedy ? `${key} is protected by AKM — ${remedy}.` : `${key} is protected by AKM`
-        });
-      }
-      if (CREDENTIAL_KEYS.has(normalized)) {
-        issues.push({ path: [...path12, key], message: `${key} cannot carry credentials` });
-      }
-      visit2(child, [...path12, key]);
+  util2.assertNever = assertNever2;
+  util2.arrayToEnum = (items) => {
+    const obj = {};
+    for (const item of items) {
+      obj[item] = item;
     }
-  };
-  visit2(value, []);
-  return issues;
-}
-function formatExtraParamsIssue(label, issue) {
-  const suffix = issue.path.map((part) => typeof part === "number" ? `[${part}]` : `.${part}`).join("");
-  return `${label}${suffix} ${issue.message}`;
-}
-function liftLegacyEngineExtraParams(raw) {
-  const lifted = [];
-  const conflicts = [];
-  const rawEngines = raw.engines;
-  if (!isRecord(rawEngines)) {
-    return { config: raw, lifted, conflicts };
-  }
-  const engines = {};
-  let anyEngineChanged = false;
-  for (const [name, engineValue] of Object.entries(rawEngines)) {
-    if (!isRecord(engineValue) || !isRecord(engineValue.extraParams)) {
-      engines[name] = engineValue;
-      continue;
-    }
-    const engine = { ...engineValue };
-    const extraParams = { ...engineValue.extraParams };
-    let engineChanged = false;
-    for (const [rawKey, value] of Object.entries(engineValue.extraParams)) {
-      const normalized = normalizeExtraParamKey(rawKey);
-      if (!LIFTABLE_EXTRA_PARAMS_KEYS.has(normalized))
-        continue;
-      const field = LEGACY_EXTRA_PARAMS_FIELD[normalized];
-      if (!field)
-        continue;
-      const existing = engine[field];
-      if (existing !== undefined && existing !== value) {
-        conflicts.push({ engine: name, key: rawKey, field, extraParamsValue: value, fieldValue: existing });
-        continue;
-      }
-      delete extraParams[rawKey];
-      engineChanged = true;
-      if (existing === value) {
-        lifted.push(`engines.${name}.extraParams.${rawKey} is redundant — engines.${name}.${field} is already set to the same value; dropped the extraParams entry`);
-        continue;
-      }
-      engine[field] = value;
-      lifted.push(`engines.${name}.extraParams.${rawKey} -> engines.${name}.${field}`);
-    }
-    if (!engineChanged) {
-      engines[name] = engineValue;
-      continue;
-    }
-    anyEngineChanged = true;
-    if (Object.keys(extraParams).length > 0) {
-      engine.extraParams = extraParams;
-    } else {
-      delete engine.extraParams;
-    }
-    engines[name] = engine;
-  }
-  if (!anyEngineChanged) {
-    return { config: raw, lifted, conflicts };
-  }
-  return { config: { ...raw, engines }, lifted, conflicts };
-}
-
-// src/core/config/config-io.ts
-import fs8 from "node:fs";
-import path12 from "node:path";
-
-// src/core/file-lock.ts
-import { randomUUID } from "node:crypto";
-import fs7 from "node:fs";
-function readLockSnapshot(lockPath) {
-  let fd;
-  try {
-    fd = fs7.openSync(lockPath, "r");
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return;
-    throw err;
-  }
-  try {
-    const rawContent = readTextFileDescriptorWithLimit(fd, MAX_LOCK_METADATA_BYTES, "Lock metadata", lockPath);
-    const stat = fs7.fstatSync(fd);
-    return {
-      rawContent,
-      identity: { dev: stat.dev, ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs }
-    };
-  } finally {
-    fs7.closeSync(fd);
-  }
-}
-function sameIdentity(left, right) {
-  return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs;
-}
-function releaseLockRaw(lockPath) {
-  try {
-    fs7.unlinkSync(lockPath);
-  } catch {}
-}
-function tryAcquireLockSync(lockPath, payload) {
-  try {
-    fs7.writeFileSync(lockPath, payload, { flag: "wx" });
-  } catch (err) {
-    if (err.code === "EEXIST")
-      return;
-    throw err;
-  }
-  let snapshot;
-  try {
-    snapshot = readLockSnapshot(lockPath);
-  } catch (error2) {
-    releaseLockRaw(lockPath);
-    throw error2;
-  }
-  if (!snapshot) {
-    releaseLockRaw(lockPath);
-    throw new Error(`Could not read newly acquired lock at ${lockPath}.`);
-  }
-  return { lockPath, ...snapshot };
-}
-function launcherPidFromEnv() {
-  const raw = process.env.AKM_LAUNCHER_PID;
-  if (!raw)
-    return;
-  const pid = Number.parseInt(raw, 10);
-  return Number.isInteger(pid) && pid > 0 ? pid : undefined;
-}
-function createLockPayload(metadata = {}) {
-  const launcherPid = launcherPidFromEnv();
-  return JSON.stringify({
-    ...metadata,
-    pid: process.pid,
-    ...launcherPid !== undefined ? { launcherPid } : {},
-    lockId: randomUUID()
-  });
-}
-function probeLock(lockPath, opts) {
-  let snapshot;
-  try {
-    snapshot = readLockSnapshot(lockPath);
-  } catch (error2) {
-    const code = error2?.code;
-    if (code === "EACCES" || code === "EPERM")
-      return { state: "inaccessible", code };
-    return { state: "stale", reason: "unreadable" };
-  }
-  if (!snapshot)
-    return { state: "absent" };
-  const { rawContent, identity: identity3 } = snapshot;
-  const ageMs = Date.now() - identity3.mtimeMs;
-  const { holderPid, launcherPid } = extractLockIdentity(rawContent);
-  if (holderPid === undefined) {
-    return { state: "stale", reason: "invalid_pid", ageMs, rawContent, identity: identity3 };
-  }
-  if (!isProcessAlive(holderPid)) {
-    return { state: "stale", reason: "pid_dead", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
-  }
-  if (opts?.staleAfterMs !== undefined && ageMs > opts.staleAfterMs) {
-    return { state: "stale", reason: "age_exceeded", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
-  }
-  return { state: "held", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
-}
-function reclaimStaleLock(lockPath, probe, options) {
-  if (probe.rawContent === undefined || probe.identity === undefined)
-    return false;
-  const expectedContent = probe.rawContent;
-  const expectedIdentity = probe.identity;
-  let current;
-  try {
-    current = readLockSnapshot(lockPath);
-  } catch {
-    return false;
-  }
-  if (!current || current.rawContent !== expectedContent || !sameIdentity(current.identity, expectedIdentity)) {
-    return false;
-  }
-  const quarantinePath = `${lockPath}.stale-${process.pid}-${randomUUID()}`;
-  try {
-    fs7.renameSync(lockPath, quarantinePath);
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return false;
-    throw err;
-  }
-  let quarantined;
-  try {
-    quarantined = readLockSnapshot(quarantinePath);
-  } catch {
-    quarantined = undefined;
-  }
-  if (!quarantined || quarantined.rawContent !== expectedContent || !sameIdentity(quarantined.identity, expectedIdentity)) {
-    try {
-      fs7.linkSync(quarantinePath, lockPath);
-    } catch (err) {
-      if (err.code !== "EEXIST")
-        throw err;
-    }
-    releaseLockRaw(quarantinePath);
-    return false;
-  }
-  options?.afterQuarantineVerified?.();
-  try {
-    fs7.unlinkSync(quarantinePath);
-    return true;
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return false;
-    throw err;
-  }
-}
-function releaseLock(ownership) {
-  const { lockPath } = ownership;
-  let current;
-  try {
-    current = readLockSnapshot(lockPath);
-  } catch {
-    return;
-  }
-  if (current && current.rawContent === ownership.rawContent && sameIdentity(current.identity, ownership.identity)) {
-    releaseLockRaw(lockPath);
-  }
-}
-function extractLockIdentity(content) {
-  const trimmed = content.trim();
-  if (!trimmed)
-    return {};
-  if (trimmed.startsWith("{")) {
-    try {
-      const parsed = JSON.parse(trimmed);
-      const pid2 = typeof parsed.pid === "number" ? parsed.pid : Number.NaN;
-      const rawLauncherPid = typeof parsed.launcherPid === "number" ? parsed.launcherPid : Number.NaN;
-      return {
-        holderPid: Number.isInteger(pid2) && pid2 > 0 ? pid2 : undefined,
-        launcherPid: Number.isInteger(rawLauncherPid) && rawLauncherPid > 0 ? rawLauncherPid : undefined
-      };
-    } catch {
-      return {};
-    }
-  }
-  const pid = Number.parseInt(trimmed, 10);
-  return { holderPid: Number.isInteger(pid) && pid > 0 ? pid : undefined };
-}
-
-// src/core/config/config-io.ts
-function readConfigText(configPath) {
-  try {
-    return readTextFile(configPath, "Config file");
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return;
-    throw err;
-  }
-}
-function parseConfigText(text, sourcePath) {
-  const stripped = stripJsonComments(text);
-  const where = sourcePath ? ` at ${sourcePath}` : "";
-  let parsed;
-  try {
-    parsed = JSON.parse(stripped);
-  } catch (err) {
-    const detail = err instanceof Error ? err.message : String(err);
-    throw new ConfigError(`Failed to parse config JSON${where}: ${detail}`, "INVALID_CONFIG_FILE", "Edit the file to fix the JSON syntax error. Comments (// and /* */) are allowed; trailing commas are not.");
-  }
-  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    throw new ConfigError(`Config file${where} must contain a JSON object at the root, got ${describeJsonRoot(parsed)}.`, "INVALID_CONFIG_FILE");
-  }
-  return parsed;
-}
-function describeJsonRoot(value) {
-  if (value === null)
-    return "null";
-  if (Array.isArray(value))
-    return "an array";
-  if (typeof value === "string")
-    return "a string";
-  if (typeof value === "number")
-    return "a number";
-  if (typeof value === "boolean")
-    return "a boolean";
-  return typeof value;
-}
-function writeConfigAtomic(configPath, config) {
-  writeFileAtomic(configPath, `${JSON.stringify(config, null, 2)}
-`);
-}
-var MAX_CONFIG_BACKUPS = 5;
-function backupExistingConfig(configPath, now = new Date) {
-  if (!fs8.existsSync(configPath))
-    return;
-  const backupDir = path12.join(getCacheDir(), "config-backups");
-  fs8.mkdirSync(backupDir, { recursive: true, mode: 448 });
-  fs8.chmodSync(backupDir, 448);
-  const timestamp = now.toISOString().replace(/[.:]/g, "-");
-  let sequence = 0;
-  let timestamped;
-  while (true) {
-    timestamped = path12.join(backupDir, `config-${timestamp}${sequence === 0 ? "" : `-${sequence}`}.json`);
-    try {
-      fs8.copyFileSync(configPath, timestamped, fs8.constants.COPYFILE_EXCL);
-      break;
-    } catch (error2) {
-      if (error2.code !== "EEXIST")
-        throw error2;
-      sequence++;
-    }
-  }
-  const latest = path12.join(backupDir, "config.latest.json");
-  fs8.copyFileSync(configPath, latest);
-  fs8.chmodSync(timestamped, 384);
-  fs8.chmodSync(latest, 384);
-  pruneOldBackups(backupDir);
-  return { timestamped, latest };
-}
-function pruneOldBackups(backupDir) {
-  pruneToNewest(backupDir, MAX_CONFIG_BACKUPS, (entry) => entry.isFile() && isTimestampedConfigBackup(entry.name));
-}
-function isTimestampedConfigBackup(name) {
-  return name.startsWith("config-") && name.endsWith(".json") && name !== "config.latest.json";
-}
-function pruneToNewest(dir, keep, select) {
-  let entries;
-  try {
-    entries = fs8.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  const candidates = entries.filter(select).map((entry) => {
-    const full = path12.join(dir, entry.name);
-    let mtime = 0;
-    try {
-      mtime = fs8.statSync(full).mtimeMs;
-    } catch {}
-    return { path: full, mtime };
-  }).sort((a, b) => b.mtime - a.mtime);
-  for (const stale of candidates.slice(keep)) {
-    try {
-      fs8.rmSync(stale.path, { recursive: true, force: true });
-    } catch {}
-  }
-}
-function getConfigLockPath() {
-  return path12.join(getConfigDir(), "config.json.lck");
-}
-var CONFIG_LOCK_MAX_RETRIES = 40;
-var CONFIG_LOCK_RETRY_DELAY_MS = 50;
-function sleepSyncMs(ms) {
-  sleepSync(ms);
-}
-function acquireConfigLock() {
-  const lockPath = getConfigLockPath();
-  try {
-    fs8.mkdirSync(path12.dirname(lockPath), { recursive: true });
-  } catch {}
-  for (let attempt = 0;attempt < CONFIG_LOCK_MAX_RETRIES; attempt++) {
-    try {
-      const ownership = tryAcquireLockSync(lockPath, createLockPayload());
-      if (ownership) {
-        return () => releaseLock(ownership);
-      }
-    } catch (error2) {
-      throw new ConfigError(`Unable to acquire config lock at ${lockPath}: ${error2 instanceof Error ? error2.message : String(error2)}`, "INVALID_CONFIG_FILE");
-    }
-    const probe = probeLock(lockPath);
-    if (probe.state === "stale" && reclaimStaleLock(lockPath, probe)) {
-      continue;
-    }
-    if (attempt < CONFIG_LOCK_MAX_RETRIES - 1) {
-      sleepSyncMs(CONFIG_LOCK_RETRY_DELAY_MS);
-    }
-  }
-  throw new ConfigError(`Timed out waiting for config lock at ${lockPath}. Another AKM process may be updating config.`, "INVALID_CONFIG_FILE");
-}
-function withConfigLock(fn) {
-  const release = acquireConfigLock();
-  try {
-    return fn();
-  } finally {
-    release();
-  }
-}
-
-// node_modules/zod/v3/external.js
-var exports_external = {};
-__export(exports_external, {
-  void: () => voidType,
-  util: () => util,
-  unknown: () => unknownType,
-  union: () => unionType,
-  undefined: () => undefinedType,
-  tuple: () => tupleType,
-  transformer: () => effectsType,
-  symbol: () => symbolType,
-  string: () => stringType,
-  strictObject: () => strictObjectType,
-  setErrorMap: () => setErrorMap,
-  set: () => setType,
-  record: () => recordType,
-  quotelessJson: () => quotelessJson,
-  promise: () => promiseType,
-  preprocess: () => preprocessType,
-  pipeline: () => pipelineType,
-  ostring: () => ostring,
-  optional: () => optionalType,
-  onumber: () => onumber,
-  oboolean: () => oboolean,
-  objectUtil: () => objectUtil,
-  object: () => objectType,
-  number: () => numberType,
-  nullable: () => nullableType,
-  null: () => nullType,
-  never: () => neverType,
-  nativeEnum: () => nativeEnumType,
-  nan: () => nanType,
-  map: () => mapType,
-  makeIssue: () => makeIssue,
-  literal: () => literalType,
-  lazy: () => lazyType,
-  late: () => late,
-  isValid: () => isValid,
-  isDirty: () => isDirty,
-  isAsync: () => isAsync,
-  isAborted: () => isAborted,
-  intersection: () => intersectionType,
-  instanceof: () => instanceOfType,
-  getParsedType: () => getParsedType,
-  getErrorMap: () => getErrorMap,
-  function: () => functionType,
-  enum: () => enumType,
-  effect: () => effectsType,
-  discriminatedUnion: () => discriminatedUnionType,
-  defaultErrorMap: () => en_default,
-  datetimeRegex: () => datetimeRegex,
-  date: () => dateType,
-  custom: () => custom,
-  coerce: () => coerce,
-  boolean: () => booleanType,
-  bigint: () => bigIntType,
-  array: () => arrayType,
-  any: () => anyType,
-  addIssueToContext: () => addIssueToContext,
-  ZodVoid: () => ZodVoid,
-  ZodUnknown: () => ZodUnknown,
-  ZodUnion: () => ZodUnion,
-  ZodUndefined: () => ZodUndefined,
-  ZodType: () => ZodType,
-  ZodTuple: () => ZodTuple,
-  ZodTransformer: () => ZodEffects,
-  ZodSymbol: () => ZodSymbol,
-  ZodString: () => ZodString,
-  ZodSet: () => ZodSet,
-  ZodSchema: () => ZodType,
-  ZodRecord: () => ZodRecord,
-  ZodReadonly: () => ZodReadonly,
-  ZodPromise: () => ZodPromise,
-  ZodPipeline: () => ZodPipeline,
-  ZodParsedType: () => ZodParsedType,
-  ZodOptional: () => ZodOptional,
-  ZodObject: () => ZodObject,
-  ZodNumber: () => ZodNumber,
-  ZodNullable: () => ZodNullable,
-  ZodNull: () => ZodNull,
-  ZodNever: () => ZodNever,
-  ZodNativeEnum: () => ZodNativeEnum,
-  ZodNaN: () => ZodNaN,
-  ZodMap: () => ZodMap,
-  ZodLiteral: () => ZodLiteral,
-  ZodLazy: () => ZodLazy,
-  ZodIssueCode: () => ZodIssueCode,
-  ZodIntersection: () => ZodIntersection,
-  ZodFunction: () => ZodFunction,
-  ZodFirstPartyTypeKind: () => ZodFirstPartyTypeKind,
-  ZodError: () => ZodError,
-  ZodEnum: () => ZodEnum,
-  ZodEffects: () => ZodEffects,
-  ZodDiscriminatedUnion: () => ZodDiscriminatedUnion,
-  ZodDefault: () => ZodDefault,
-  ZodDate: () => ZodDate,
-  ZodCatch: () => ZodCatch,
-  ZodBranded: () => ZodBranded,
-  ZodBoolean: () => ZodBoolean,
-  ZodBigInt: () => ZodBigInt,
-  ZodArray: () => ZodArray,
-  ZodAny: () => ZodAny,
-  Schema: () => ZodType,
-  ParseStatus: () => ParseStatus,
-  OK: () => OK,
-  NEVER: () => NEVER,
-  INVALID: () => INVALID,
-  EMPTY_PATH: () => EMPTY_PATH,
-  DIRTY: () => DIRTY,
-  BRAND: () => BRAND
-});
-
-// node_modules/zod/v3/helpers/util.js
-var util;
-(function(util2) {
-  util2.assertEqual = (_) => {};
-  function assertIs(_arg) {}
-  util2.assertIs = assertIs;
-  function assertNever2(_x) {
-    throw new Error;
-  }
-  util2.assertNever = assertNever2;
-  util2.arrayToEnum = (items) => {
-    const obj = {};
-    for (const item of items) {
-      obj[item] = item;
-    }
-    return obj;
+    return obj;
   };
   util2.getValidEnumValues = (obj) => {
     const validKeys = util2.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== "number");
@@ -32389,8 +31895,8 @@ function getErrorMap() {
 }
 // node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path13, errorMaps, issueData } = params;
-  const fullPath = [...path13, ...issueData.path || []];
+  const { data, path: path12, errorMaps, issueData } = params;
+  const fullPath = [...path12, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -32502,11 +32008,11 @@ var errorUtil;
 
 // node_modules/zod/v3/types.js
 class ParseInputLazyPath {
-  constructor(parent, value, path13, key) {
+  constructor(parent, value, path12, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path13;
+    this._path = path12;
     this._key = key;
   }
   get path() {
@@ -35785,108 +35291,258 @@ function custom(check, _params = {}, fatal) {
           }
         });
       }
-      if (!r) {
-        const params = cleanParams(_params, data);
-        const _fatal = params.fatal ?? fatal ?? true;
-        ctx.addIssue({ code: "custom", ...params, fatal: _fatal });
+      if (!r) {
+        const params = cleanParams(_params, data);
+        const _fatal = params.fatal ?? fatal ?? true;
+        ctx.addIssue({ code: "custom", ...params, fatal: _fatal });
+      }
+      return;
+    });
+  return ZodAny.create();
+}
+var late = {
+  object: ZodObject.lazycreate
+};
+var ZodFirstPartyTypeKind;
+(function(ZodFirstPartyTypeKind2) {
+  ZodFirstPartyTypeKind2["ZodString"] = "ZodString";
+  ZodFirstPartyTypeKind2["ZodNumber"] = "ZodNumber";
+  ZodFirstPartyTypeKind2["ZodNaN"] = "ZodNaN";
+  ZodFirstPartyTypeKind2["ZodBigInt"] = "ZodBigInt";
+  ZodFirstPartyTypeKind2["ZodBoolean"] = "ZodBoolean";
+  ZodFirstPartyTypeKind2["ZodDate"] = "ZodDate";
+  ZodFirstPartyTypeKind2["ZodSymbol"] = "ZodSymbol";
+  ZodFirstPartyTypeKind2["ZodUndefined"] = "ZodUndefined";
+  ZodFirstPartyTypeKind2["ZodNull"] = "ZodNull";
+  ZodFirstPartyTypeKind2["ZodAny"] = "ZodAny";
+  ZodFirstPartyTypeKind2["ZodUnknown"] = "ZodUnknown";
+  ZodFirstPartyTypeKind2["ZodNever"] = "ZodNever";
+  ZodFirstPartyTypeKind2["ZodVoid"] = "ZodVoid";
+  ZodFirstPartyTypeKind2["ZodArray"] = "ZodArray";
+  ZodFirstPartyTypeKind2["ZodObject"] = "ZodObject";
+  ZodFirstPartyTypeKind2["ZodUnion"] = "ZodUnion";
+  ZodFirstPartyTypeKind2["ZodDiscriminatedUnion"] = "ZodDiscriminatedUnion";
+  ZodFirstPartyTypeKind2["ZodIntersection"] = "ZodIntersection";
+  ZodFirstPartyTypeKind2["ZodTuple"] = "ZodTuple";
+  ZodFirstPartyTypeKind2["ZodRecord"] = "ZodRecord";
+  ZodFirstPartyTypeKind2["ZodMap"] = "ZodMap";
+  ZodFirstPartyTypeKind2["ZodSet"] = "ZodSet";
+  ZodFirstPartyTypeKind2["ZodFunction"] = "ZodFunction";
+  ZodFirstPartyTypeKind2["ZodLazy"] = "ZodLazy";
+  ZodFirstPartyTypeKind2["ZodLiteral"] = "ZodLiteral";
+  ZodFirstPartyTypeKind2["ZodEnum"] = "ZodEnum";
+  ZodFirstPartyTypeKind2["ZodEffects"] = "ZodEffects";
+  ZodFirstPartyTypeKind2["ZodNativeEnum"] = "ZodNativeEnum";
+  ZodFirstPartyTypeKind2["ZodOptional"] = "ZodOptional";
+  ZodFirstPartyTypeKind2["ZodNullable"] = "ZodNullable";
+  ZodFirstPartyTypeKind2["ZodDefault"] = "ZodDefault";
+  ZodFirstPartyTypeKind2["ZodCatch"] = "ZodCatch";
+  ZodFirstPartyTypeKind2["ZodPromise"] = "ZodPromise";
+  ZodFirstPartyTypeKind2["ZodBranded"] = "ZodBranded";
+  ZodFirstPartyTypeKind2["ZodPipeline"] = "ZodPipeline";
+  ZodFirstPartyTypeKind2["ZodReadonly"] = "ZodReadonly";
+})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
+var instanceOfType = (cls, params = {
+  message: `Input not instance of ${cls.name}`
+}) => custom((data) => data instanceof cls, params);
+var stringType = ZodString.create;
+var numberType = ZodNumber.create;
+var nanType = ZodNaN.create;
+var bigIntType = ZodBigInt.create;
+var booleanType = ZodBoolean.create;
+var dateType = ZodDate.create;
+var symbolType = ZodSymbol.create;
+var undefinedType = ZodUndefined.create;
+var nullType = ZodNull.create;
+var anyType = ZodAny.create;
+var unknownType = ZodUnknown.create;
+var neverType = ZodNever.create;
+var voidType = ZodVoid.create;
+var arrayType = ZodArray.create;
+var objectType = ZodObject.create;
+var strictObjectType = ZodObject.strictCreate;
+var unionType = ZodUnion.create;
+var discriminatedUnionType = ZodDiscriminatedUnion.create;
+var intersectionType = ZodIntersection.create;
+var tupleType = ZodTuple.create;
+var recordType = ZodRecord.create;
+var mapType = ZodMap.create;
+var setType = ZodSet.create;
+var functionType = ZodFunction.create;
+var lazyType = ZodLazy.create;
+var literalType = ZodLiteral.create;
+var enumType = ZodEnum.create;
+var nativeEnumType = ZodNativeEnum.create;
+var promiseType = ZodPromise.create;
+var effectsType = ZodEffects.create;
+var optionalType = ZodOptional.create;
+var nullableType = ZodNullable.create;
+var preprocessType = ZodEffects.createWithPreprocess;
+var pipelineType = ZodPipeline.create;
+var ostring = () => stringType().optional();
+var onumber = () => numberType().optional();
+var oboolean = () => booleanType().optional();
+var coerce = {
+  string: (arg) => ZodString.create({ ...arg, coerce: true }),
+  number: (arg) => ZodNumber.create({ ...arg, coerce: true }),
+  boolean: (arg) => ZodBoolean.create({
+    ...arg,
+    coerce: true
+  }),
+  bigint: (arg) => ZodBigInt.create({ ...arg, coerce: true }),
+  date: (arg) => ZodDate.create({ ...arg, coerce: true })
+};
+var NEVER = INVALID;
+// src/core/extra-params.ts
+var EXTRA_PARAMS_PROTECTED_TOP_LEVEL_KEYS = [
+  "model",
+  "messages",
+  "temperature",
+  "maxtokens",
+  "responseformat",
+  "stream",
+  "streamoptions",
+  "enablethinking",
+  "reasoningeffort",
+  "chattemplatekwargs"
+];
+var EXTRA_PARAMS_CREDENTIAL_KEYS = [
+  "authorization",
+  "headers",
+  "apikey",
+  "token",
+  "password",
+  "secret",
+  "cookie",
+  "setcookie"
+];
+var PROTECTED_TOP_LEVEL_KEYS = new Set(EXTRA_PARAMS_PROTECTED_TOP_LEVEL_KEYS);
+var CREDENTIAL_KEYS = new Set(EXTRA_PARAMS_CREDENTIAL_KEYS);
+var LEGACY_EXTRA_PARAMS_FIELD = {
+  model: "model",
+  temperature: "temperature",
+  maxtokens: "maxTokens",
+  enablethinking: "enableThinking",
+  reasoningeffort: "reasoningEffort"
+};
+var LIFTABLE_EXTRA_PARAMS_KEYS = new Set(["temperature", "maxtokens", "enablethinking", "reasoningeffort"]);
+var EXTRA_PARAMS_NO_FIELD_REMEDY = {
+  messages: "AKM builds the request messages internally — remove it from extraParams",
+  responseformat: "AKM controls the response format internally — remove it from extraParams",
+  stream: "AKM controls streaming internally — remove it from extraParams",
+  streamoptions: "AKM controls streaming internally — remove it from extraParams",
+  chattemplatekwargs: "set engines.<name>.enableThinking instead of chat_template_kwargs.enable_thinking"
+};
+function protectedKeyRemedy(normalized) {
+  const field = LEGACY_EXTRA_PARAMS_FIELD[normalized];
+  if (field) {
+    const note = normalized === "reasoningeffort" ? " (moved to a first-class field in 0.9.2)" : "";
+    return `set engines.<name>.${field} instead${note}`;
+  }
+  return EXTRA_PARAMS_NO_FIELD_REMEDY[normalized];
+}
+function normalizeExtraParamKey(key) {
+  return key.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function validateExtraParams(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return [{ path: [], message: "must be an object" }];
+  }
+  const issues = [];
+  const seen = new WeakSet;
+  const visit2 = (entry, path12) => {
+    if (Array.isArray(entry)) {
+      if (seen.has(entry))
+        return;
+      seen.add(entry);
+      entry.forEach((child, index) => {
+        visit2(child, [...path12, index]);
+      });
+      return;
+    }
+    if (!entry || typeof entry !== "object")
+      return;
+    if (seen.has(entry))
+      return;
+    seen.add(entry);
+    for (const [key, child] of Object.entries(entry)) {
+      const normalized = normalizeExtraParamKey(key);
+      if (path12.length === 0 && PROTECTED_TOP_LEVEL_KEYS.has(normalized)) {
+        const remedy = protectedKeyRemedy(normalized);
+        issues.push({
+          path: [key],
+          message: remedy ? `${key} is protected by AKM — ${remedy}.` : `${key} is protected by AKM`
+        });
+      }
+      if (CREDENTIAL_KEYS.has(normalized)) {
+        issues.push({ path: [...path12, key], message: `${key} cannot carry credentials` });
+      }
+      visit2(child, [...path12, key]);
+    }
+  };
+  visit2(value, []);
+  return issues;
+}
+function formatExtraParamsIssue(label, issue) {
+  const suffix = issue.path.map((part) => typeof part === "number" ? `[${part}]` : `.${part}`).join("");
+  return `${label}${suffix} ${issue.message}`;
+}
+function liftLegacyEngineExtraParams(raw) {
+  const lifted = [];
+  const conflicts = [];
+  const rawEngines = raw.engines;
+  if (!isRecord(rawEngines)) {
+    return { config: raw, lifted, conflicts };
+  }
+  const engines = {};
+  let anyEngineChanged = false;
+  for (const [name, engineValue] of Object.entries(rawEngines)) {
+    if (!isRecord(engineValue) || !isRecord(engineValue.extraParams)) {
+      engines[name] = engineValue;
+      continue;
+    }
+    const engine = { ...engineValue };
+    const extraParams = { ...engineValue.extraParams };
+    let engineChanged = false;
+    for (const [rawKey, value] of Object.entries(engineValue.extraParams)) {
+      const normalized = normalizeExtraParamKey(rawKey);
+      if (!LIFTABLE_EXTRA_PARAMS_KEYS.has(normalized))
+        continue;
+      const field = LEGACY_EXTRA_PARAMS_FIELD[normalized];
+      if (!field)
+        continue;
+      const existing = engine[field];
+      if (existing !== undefined && existing !== value) {
+        conflicts.push({ engine: name, key: rawKey, field, extraParamsValue: value, fieldValue: existing });
+        continue;
+      }
+      delete extraParams[rawKey];
+      engineChanged = true;
+      if (existing === value) {
+        lifted.push(`engines.${name}.extraParams.${rawKey} is redundant — engines.${name}.${field} is already set to the same value; dropped the extraParams entry`);
+        continue;
       }
-      return;
-    });
-  return ZodAny.create();
+      engine[field] = value;
+      lifted.push(`engines.${name}.extraParams.${rawKey} -> engines.${name}.${field}`);
+    }
+    if (!engineChanged) {
+      engines[name] = engineValue;
+      continue;
+    }
+    anyEngineChanged = true;
+    if (Object.keys(extraParams).length > 0) {
+      engine.extraParams = extraParams;
+    } else {
+      delete engine.extraParams;
+    }
+    engines[name] = engine;
+  }
+  if (!anyEngineChanged) {
+    return { config: raw, lifted, conflicts };
+  }
+  return { config: { ...raw, engines }, lifted, conflicts };
 }
-var late = {
-  object: ZodObject.lazycreate
-};
-var ZodFirstPartyTypeKind;
-(function(ZodFirstPartyTypeKind2) {
-  ZodFirstPartyTypeKind2["ZodString"] = "ZodString";
-  ZodFirstPartyTypeKind2["ZodNumber"] = "ZodNumber";
-  ZodFirstPartyTypeKind2["ZodNaN"] = "ZodNaN";
-  ZodFirstPartyTypeKind2["ZodBigInt"] = "ZodBigInt";
-  ZodFirstPartyTypeKind2["ZodBoolean"] = "ZodBoolean";
-  ZodFirstPartyTypeKind2["ZodDate"] = "ZodDate";
-  ZodFirstPartyTypeKind2["ZodSymbol"] = "ZodSymbol";
-  ZodFirstPartyTypeKind2["ZodUndefined"] = "ZodUndefined";
-  ZodFirstPartyTypeKind2["ZodNull"] = "ZodNull";
-  ZodFirstPartyTypeKind2["ZodAny"] = "ZodAny";
-  ZodFirstPartyTypeKind2["ZodUnknown"] = "ZodUnknown";
-  ZodFirstPartyTypeKind2["ZodNever"] = "ZodNever";
-  ZodFirstPartyTypeKind2["ZodVoid"] = "ZodVoid";
-  ZodFirstPartyTypeKind2["ZodArray"] = "ZodArray";
-  ZodFirstPartyTypeKind2["ZodObject"] = "ZodObject";
-  ZodFirstPartyTypeKind2["ZodUnion"] = "ZodUnion";
-  ZodFirstPartyTypeKind2["ZodDiscriminatedUnion"] = "ZodDiscriminatedUnion";
-  ZodFirstPartyTypeKind2["ZodIntersection"] = "ZodIntersection";
-  ZodFirstPartyTypeKind2["ZodTuple"] = "ZodTuple";
-  ZodFirstPartyTypeKind2["ZodRecord"] = "ZodRecord";
-  ZodFirstPartyTypeKind2["ZodMap"] = "ZodMap";
-  ZodFirstPartyTypeKind2["ZodSet"] = "ZodSet";
-  ZodFirstPartyTypeKind2["ZodFunction"] = "ZodFunction";
-  ZodFirstPartyTypeKind2["ZodLazy"] = "ZodLazy";
-  ZodFirstPartyTypeKind2["ZodLiteral"] = "ZodLiteral";
-  ZodFirstPartyTypeKind2["ZodEnum"] = "ZodEnum";
-  ZodFirstPartyTypeKind2["ZodEffects"] = "ZodEffects";
-  ZodFirstPartyTypeKind2["ZodNativeEnum"] = "ZodNativeEnum";
-  ZodFirstPartyTypeKind2["ZodOptional"] = "ZodOptional";
-  ZodFirstPartyTypeKind2["ZodNullable"] = "ZodNullable";
-  ZodFirstPartyTypeKind2["ZodDefault"] = "ZodDefault";
-  ZodFirstPartyTypeKind2["ZodCatch"] = "ZodCatch";
-  ZodFirstPartyTypeKind2["ZodPromise"] = "ZodPromise";
-  ZodFirstPartyTypeKind2["ZodBranded"] = "ZodBranded";
-  ZodFirstPartyTypeKind2["ZodPipeline"] = "ZodPipeline";
-  ZodFirstPartyTypeKind2["ZodReadonly"] = "ZodReadonly";
-})(ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {}));
-var instanceOfType = (cls, params = {
-  message: `Input not instance of ${cls.name}`
-}) => custom((data) => data instanceof cls, params);
-var stringType = ZodString.create;
-var numberType = ZodNumber.create;
-var nanType = ZodNaN.create;
-var bigIntType = ZodBigInt.create;
-var booleanType = ZodBoolean.create;
-var dateType = ZodDate.create;
-var symbolType = ZodSymbol.create;
-var undefinedType = ZodUndefined.create;
-var nullType = ZodNull.create;
-var anyType = ZodAny.create;
-var unknownType = ZodUnknown.create;
-var neverType = ZodNever.create;
-var voidType = ZodVoid.create;
-var arrayType = ZodArray.create;
-var objectType = ZodObject.create;
-var strictObjectType = ZodObject.strictCreate;
-var unionType = ZodUnion.create;
-var discriminatedUnionType = ZodDiscriminatedUnion.create;
-var intersectionType = ZodIntersection.create;
-var tupleType = ZodTuple.create;
-var recordType = ZodRecord.create;
-var mapType = ZodMap.create;
-var setType = ZodSet.create;
-var functionType = ZodFunction.create;
-var lazyType = ZodLazy.create;
-var literalType = ZodLiteral.create;
-var enumType = ZodEnum.create;
-var nativeEnumType = ZodNativeEnum.create;
-var promiseType = ZodPromise.create;
-var effectsType = ZodEffects.create;
-var optionalType = ZodOptional.create;
-var nullableType = ZodNullable.create;
-var preprocessType = ZodEffects.createWithPreprocess;
-var pipelineType = ZodPipeline.create;
-var ostring = () => stringType().optional();
-var onumber = () => numberType().optional();
-var oboolean = () => booleanType().optional();
-var coerce = {
-  string: (arg) => ZodString.create({ ...arg, coerce: true }),
-  number: (arg) => ZodNumber.create({ ...arg, coerce: true }),
-  boolean: (arg) => ZodBoolean.create({
-    ...arg,
-    coerce: true
-  }),
-  bigint: (arg) => ZodBigInt.create({ ...arg, coerce: true }),
-  date: (arg) => ZodDate.create({ ...arg, coerce: true })
-};
-var NEVER = INVALID;
+
 // src/core/config/schema/primitives.ts
 var CURRENT_CONFIG_VERSION = "0.9.0";
 var positiveInt = exports_external.number().int().positive();
@@ -36179,8 +35835,6 @@ var CONSOLIDATE_PROCESS_FIELDS = {
   limit: processLimitField,
   minPoolSize: exports_external.number().int().min(0).optional(),
   maxChunkSize: exports_external.number().int().min(1).max(50).optional(),
-  incrementalSince: exports_external.string().optional(),
-  neighborsPerChanged: exports_external.number().int().min(1).optional(),
   p90ChunkSecondsDefault: exports_external.number().finite().positive().optional(),
   antiCollapse: antiCollapseField
 };
@@ -36188,13 +35842,6 @@ var MEMORY_INFERENCE_PROCESS_FIELDS = {
   minPendingCount: exports_external.number().int().min(0).optional(),
   cls: clsField
 };
-var GRAPH_EXTRACTION_PROCESS_FIELDS = {
-  topN: positiveInt.optional(),
-  includeTypes: exports_external.array(exports_external.string().min(1)).min(1).optional(),
-  batchSize: positiveInt.optional(),
-  fullScan: exports_external.boolean().optional(),
-  maxChunksPerAsset: positiveInt.optional()
-};
 var EXTRACT_PROCESS_FIELDS = {
   defaultSince: exports_external.string().min(1).optional(),
   maxTotalChars: positiveInt.optional(),
@@ -36230,7 +35877,6 @@ var ImproveProcessConfigSchema = exports_external.object({
   ...DISTILL_PROCESS_FIELDS,
   ...CONSOLIDATE_PROCESS_FIELDS,
   ...MEMORY_INFERENCE_PROCESS_FIELDS,
-  ...GRAPH_EXTRACTION_PROCESS_FIELDS,
   ...EXTRACT_PROCESS_FIELDS,
   ...TRIAGE_PROCESS_FIELDS,
   ...PROACTIVE_MAINTENANCE_PROCESS_FIELDS
@@ -36239,17 +35885,16 @@ var ReflectProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BA
 var DistillProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...DISTILL_PROCESS_FIELDS }).passthrough().superRefine(rejectExcludeRefPrefixesOutsideReflect);
 var ConsolidateProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...CONSOLIDATE_PROCESS_FIELDS }).passthrough().superRefine(rejectExcludeRefPrefixesOutsideReflect);
 var MemoryInferenceProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...MEMORY_INFERENCE_PROCESS_FIELDS }).passthrough();
-var GraphExtractionProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...GRAPH_EXTRACTION_PROCESS_FIELDS }).passthrough();
 var ExtractProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...EXTRACT_PROCESS_FIELDS }).passthrough();
 var ValidationProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS }).passthrough();
 var TriageProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...TRIAGE_PROCESS_FIELDS }).passthrough();
 var ProactiveMaintenanceProcessConfigSchema = exports_external.object({ ...IMPROVE_PROCESS_BASE_FIELDS, ...PROACTIVE_MAINTENANCE_PROCESS_FIELDS }).passthrough();
+var RETIRED_PROCESS_NAMES = new Set(["graphExtraction"]);
 var ImproveProfileProcessesSchema = exports_external.object({
   reflect: ReflectProcessConfigSchema.optional(),
   distill: DistillProcessConfigSchema.optional(),
   consolidate: ConsolidateProcessConfigSchema.optional(),
   memoryInference: MemoryInferenceProcessConfigSchema.optional(),
-  graphExtraction: GraphExtractionProcessConfigSchema.optional(),
   extract: ExtractProcessConfigSchema.optional(),
   validation: ValidationProcessConfigSchema.optional(),
   triage: TriageProcessConfigSchema.optional(),
@@ -36262,7 +35907,7 @@ var ImproveProfileProcessesSchema = exports_external.object({
     });
   }
   for (const [name, process2] of Object.entries(val)) {
-    if (!(name in IMPROVE_PROCESS_ENGINE_CAPABILITIES) && process2 !== null && typeof process2 === "object" && process2.enabled === true) {
+    if (!(name in IMPROVE_PROCESS_ENGINE_CAPABILITIES) && !RETIRED_PROCESS_NAMES.has(name) && process2 !== null && typeof process2 === "object" && process2.enabled === true) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
         path: [name],
@@ -36331,11 +35976,8 @@ var IndexPassConfigSchema = exports_external.preprocess((raw, ctx) => {
   model: nonEmptyString.optional(),
   timeoutMs: exports_external.union([positiveInt, exports_external.null()]).optional(),
   enabled: exports_external.boolean().optional(),
-  llm: LlmInvocationOverridesSchema.optional(),
-  graphExtractionBatchSize: positiveInt.optional(),
-  graphExtractionIncludeTypes: exports_external.array(exports_external.string().min(1)).nonempty().optional()
+  llm: LlmInvocationOverridesSchema.optional()
 }).passthrough());
-var MetadataEnhanceSchema = exports_external.object({ enabled: exports_external.boolean().optional() }).passthrough();
 var IndexDefaultsSchema = exports_external.object({
   engine: engineName.optional(),
   model: nonEmptyString.optional(),
@@ -36348,7 +35990,7 @@ var IndexConfigRuntimeSchema = exports_external.preprocess((raw, ctx) => {
   if (Array.isArray(raw)) {
     ctx.addIssue({
       code: exports_external.ZodIssueCode.custom,
-      message: 'Invalid `index` config: expected an object keyed by pass name (e.g. `{ "enrichment": { "enabled": false } }`).'
+      message: 'Invalid `index` config: expected an object keyed by pass name (e.g. `{ "memory": { "enabled": false } }`).'
     });
     return raw;
   }
@@ -36372,8 +36014,7 @@ var IndexConfigRuntimeSchema = exports_external.preprocess((raw, ctx) => {
   }
   return cleaned ?? raw;
 }, exports_external.object({
-  defaults: IndexDefaultsSchema.optional(),
-  metadataEnhance: MetadataEnhanceSchema.optional()
+  defaults: IndexDefaultsSchema.optional()
 }).catchall(IndexPassConfigSchema));
 var IndexConfigSchema = IndexConfigRuntimeSchema;
 
@@ -36648,144 +36289,502 @@ var AkmConfigSchema = AkmConfigBaseSchema.superRefine((config, ctx) => {
     }
   }
   if (config.defaultWriteTarget !== undefined) {
-    const target = config.bundles?.[config.defaultWriteTarget];
-    if (!target) {
+    const target = config.bundles?.[config.defaultWriteTarget];
+    if (!target) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["defaultWriteTarget"],
+        message: `defaultWriteTarget "${config.defaultWriteTarget}" does not name a configured bundle`
+      });
+    } else if (target.enabled === false) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["defaultWriteTarget"],
+        message: `defaultWriteTarget "${config.defaultWriteTarget}" is disabled`
+      });
+    }
+  }
+  for (const key of ["llm", "agent", "improve"]) {
+    if (config.defaults && key in config.defaults) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["defaults", key],
+        message: `defaults.${key} is retired in 0.9`
+      });
+    }
+  }
+  for (const [name, engine] of Object.entries(config.engines ?? {})) {
+    if (engine.kind === "agent" && engine.llmEngine) {
+      const fallback = config.engines?.[engine.llmEngine];
+      if (!fallback || fallback.kind !== "llm") {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          path: ["engines", name, "llmEngine"],
+          message: "llmEngine must name an LLM engine"
+        });
+      }
+    }
+  }
+  const defaultEngine = config.defaults?.engine;
+  if (defaultEngine && !config.engines?.[defaultEngine]) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["defaults", "engine"],
+      message: "engine does not name a configured engine"
+    });
+  }
+  const defaultLlm = config.defaults?.llmEngine;
+  if (defaultLlm && config.engines?.[defaultLlm]?.kind !== "llm") {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["defaults", "llmEngine"],
+      message: "llmEngine must name an LLM engine"
+    });
+  }
+  const workflowJudge = config.workflow?.judgeEngine;
+  if (workflowJudge && !config.engines?.[workflowJudge]) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["workflow", "judgeEngine"],
+      message: "judgeEngine does not name a configured engine"
+    });
+  }
+  const defaultStrategy = config.defaults?.improveStrategy;
+  if (defaultStrategy && defaultStrategy !== "graph-refresh" && !BUILTIN_IMPROVE_STRATEGY_NAMES.includes(defaultStrategy) && !config.improve?.strategies?.[defaultStrategy]) {
+    ctx.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["defaults", "improveStrategy"],
+      message: "improveStrategy does not name a built-in or configured strategy"
+    });
+  }
+  for (const [strategyName, strategy] of Object.entries(config.improve?.strategies ?? {})) {
+    const strategyEngine = strategy.engine;
+    if (strategyEngine) {
+      const engine = config.engines?.[strategyEngine];
+      if (!engine || engine.kind !== "llm") {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          path: ["improve", "strategies", strategyName, "engine"],
+          message: engine ? "strategy engine must be an LLM engine" : "engine does not name a configured engine"
+        });
+      }
+    }
+    for (const [processName, process2] of Object.entries(strategy.processes ?? {})) {
+      const processConfig = process2;
+      const capability = IMPROVE_PROCESS_ENGINE_CAPABILITIES[processName];
+      if (processConfig.engine && capability === null) {
+        ctx.addIssue({
+          code: exports_external.ZodIssueCode.custom,
+          path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
+          message: `${processName} does not dispatch an engine`
+        });
+      } else {
+        const processEngine = processConfig.engine ?? strategyEngine;
+        if (processEngine && capability === "llm") {
+          const engine = config.engines?.[processEngine];
+          if (!engine || engine.kind !== "llm") {
+            ctx.addIssue({
+              code: exports_external.ZodIssueCode.custom,
+              path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
+              message: engine ? `${processName} requires an LLM engine` : "engine does not name a configured engine"
+            });
+          }
+        } else if (processConfig.engine && capability === "runner" && !config.engines?.[processConfig.engine]) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
+            message: "engine does not name a configured engine"
+          });
+        }
+      }
+      const judgmentEngine = processConfig.judgment?.engine;
+      if (processConfig.judgment?.enabled === true && judgmentEngine) {
+        const engine = config.engines?.[judgmentEngine];
+        if (!engine) {
+          ctx.addIssue({
+            code: exports_external.ZodIssueCode.custom,
+            path: ["improve", "strategies", strategyName, "processes", processName, "judgment", "engine"],
+            message: "engine does not name a configured engine"
+          });
+        }
+      }
+    }
+  }
+  if (config.defaultWriteTarget !== undefined) {
+    const knownNames = Object.keys(config.bundles ?? {});
+    if (knownNames.length === 0) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
         path: ["defaultWriteTarget"],
-        message: `defaultWriteTarget "${config.defaultWriteTarget}" does not name a configured bundle`
+        message: `defaultWriteTarget "${config.defaultWriteTarget}" cannot be resolved: no bundles configured. ` + "Add at least one entry to `bundles` first."
       });
-    } else if (target.enabled === false) {
+    } else if (!knownNames.includes(config.defaultWriteTarget)) {
       ctx.addIssue({
         code: exports_external.ZodIssueCode.custom,
         path: ["defaultWriteTarget"],
-        message: `defaultWriteTarget "${config.defaultWriteTarget}" is disabled`
+        message: `defaultWriteTarget "${config.defaultWriteTarget}" does not match any configured bundle: ${knownNames.map((n) => `"${n}"`).join(", ")}.`
       });
     }
   }
-  for (const key of ["llm", "agent", "improve"]) {
-    if (config.defaults && key in config.defaults) {
-      ctx.addIssue({
-        code: exports_external.ZodIssueCode.custom,
-        path: ["defaults", key],
-        message: `defaults.${key} is retired in 0.9`
-      });
+});
+
+// src/core/config/deep-merge.ts
+var UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+function isPlainObject(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function copyConfigValue(value) {
+  if (Array.isArray(value))
+    return value.map(copyConfigValue);
+  if (!isPlainObject(value))
+    return value;
+  const copy = {};
+  for (const key of Object.keys(value)) {
+    if (UNSAFE_KEYS.has(key))
+      throw new TypeError(`Unsafe configuration key: ${key}`);
+    copy[key] = copyConfigValue(value[key]);
+  }
+  return copy;
+}
+function deepMergeConfig(base, override) {
+  const result = copyConfigValue(base);
+  for (const key of Object.keys(override)) {
+    if (UNSAFE_KEYS.has(key))
+      throw new TypeError(`Unsafe configuration key: ${key}`);
+    const next = override[key];
+    if (next === undefined)
+      continue;
+    const current = result[key];
+    result[key] = isPlainObject(current) && isPlainObject(next) ? deepMergeConfig(current, next) : copyConfigValue(next);
+  }
+  return result;
+}
+
+// src/core/config/config.ts
+import fs10 from "node:fs";
+import os2 from "node:os";
+import path14 from "node:path";
+import { isDeepStrictEqual } from "node:util";
+
+// src/core/config/config-io.ts
+import fs8 from "node:fs";
+import path12 from "node:path";
+
+// src/core/file-lock.ts
+import { randomUUID } from "node:crypto";
+import fs7 from "node:fs";
+function readLockSnapshot(lockPath) {
+  let fd;
+  try {
+    fd = fs7.openSync(lockPath, "r");
+  } catch (err) {
+    if (err.code === "ENOENT")
+      return;
+    throw err;
+  }
+  try {
+    const rawContent = readTextFileDescriptorWithLimit(fd, MAX_LOCK_METADATA_BYTES, "Lock metadata", lockPath);
+    const stat = fs7.fstatSync(fd);
+    return {
+      rawContent,
+      identity: { dev: stat.dev, ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs }
+    };
+  } finally {
+    fs7.closeSync(fd);
+  }
+}
+function sameIdentity(left, right) {
+  return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeMs === right.mtimeMs;
+}
+function releaseLockRaw(lockPath) {
+  try {
+    fs7.unlinkSync(lockPath);
+  } catch {}
+}
+function tryAcquireLockSync(lockPath, payload) {
+  try {
+    fs7.writeFileSync(lockPath, payload, { flag: "wx" });
+  } catch (err) {
+    if (err.code === "EEXIST")
+      return;
+    throw err;
+  }
+  let snapshot;
+  try {
+    snapshot = readLockSnapshot(lockPath);
+  } catch (error2) {
+    releaseLockRaw(lockPath);
+    throw error2;
+  }
+  if (!snapshot) {
+    releaseLockRaw(lockPath);
+    throw new Error(`Could not read newly acquired lock at ${lockPath}.`);
+  }
+  return { lockPath, ...snapshot };
+}
+function launcherPidFromEnv() {
+  const raw = process.env.AKM_LAUNCHER_PID;
+  if (!raw)
+    return;
+  const pid = Number.parseInt(raw, 10);
+  return Number.isInteger(pid) && pid > 0 ? pid : undefined;
+}
+function createLockPayload(metadata = {}) {
+  const launcherPid = launcherPidFromEnv();
+  return JSON.stringify({
+    ...metadata,
+    pid: process.pid,
+    ...launcherPid !== undefined ? { launcherPid } : {},
+    lockId: randomUUID()
+  });
+}
+function probeLock(lockPath, opts) {
+  let snapshot;
+  try {
+    snapshot = readLockSnapshot(lockPath);
+  } catch (error2) {
+    const code = error2?.code;
+    if (code === "EACCES" || code === "EPERM")
+      return { state: "inaccessible", code };
+    return { state: "stale", reason: "unreadable" };
+  }
+  if (!snapshot)
+    return { state: "absent" };
+  const { rawContent, identity: identity3 } = snapshot;
+  const ageMs = Date.now() - identity3.mtimeMs;
+  const { holderPid, launcherPid } = extractLockIdentity(rawContent);
+  if (holderPid === undefined) {
+    return { state: "stale", reason: "invalid_pid", ageMs, rawContent, identity: identity3 };
+  }
+  if (!isProcessAlive(holderPid)) {
+    return { state: "stale", reason: "pid_dead", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
+  }
+  if (opts?.staleAfterMs !== undefined && ageMs > opts.staleAfterMs) {
+    return { state: "stale", reason: "age_exceeded", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
+  }
+  return { state: "held", holderPid, launcherPid, ageMs, rawContent, identity: identity3 };
+}
+function reclaimStaleLock(lockPath, probe, options) {
+  if (probe.rawContent === undefined || probe.identity === undefined)
+    return false;
+  const expectedContent = probe.rawContent;
+  const expectedIdentity = probe.identity;
+  let current;
+  try {
+    current = readLockSnapshot(lockPath);
+  } catch {
+    return false;
+  }
+  if (!current || current.rawContent !== expectedContent || !sameIdentity(current.identity, expectedIdentity)) {
+    return false;
+  }
+  const quarantinePath = `${lockPath}.stale-${process.pid}-${randomUUID()}`;
+  try {
+    fs7.renameSync(lockPath, quarantinePath);
+  } catch (err) {
+    if (err.code === "ENOENT")
+      return false;
+    throw err;
+  }
+  let quarantined;
+  try {
+    quarantined = readLockSnapshot(quarantinePath);
+  } catch {
+    quarantined = undefined;
+  }
+  if (!quarantined || quarantined.rawContent !== expectedContent || !sameIdentity(quarantined.identity, expectedIdentity)) {
+    try {
+      fs7.linkSync(quarantinePath, lockPath);
+    } catch (err) {
+      if (err.code !== "EEXIST")
+        throw err;
+    }
+    releaseLockRaw(quarantinePath);
+    return false;
+  }
+  options?.afterQuarantineVerified?.();
+  try {
+    fs7.unlinkSync(quarantinePath);
+    return true;
+  } catch (err) {
+    if (err.code === "ENOENT")
+      return false;
+    throw err;
+  }
+}
+function releaseLock(ownership) {
+  const { lockPath } = ownership;
+  let current;
+  try {
+    current = readLockSnapshot(lockPath);
+  } catch {
+    return;
+  }
+  if (current && current.rawContent === ownership.rawContent && sameIdentity(current.identity, ownership.identity)) {
+    releaseLockRaw(lockPath);
+  }
+}
+function extractLockIdentity(content) {
+  const trimmed = content.trim();
+  if (!trimmed)
+    return {};
+  if (trimmed.startsWith("{")) {
+    try {
+      const parsed = JSON.parse(trimmed);
+      const pid2 = typeof parsed.pid === "number" ? parsed.pid : Number.NaN;
+      const rawLauncherPid = typeof parsed.launcherPid === "number" ? parsed.launcherPid : Number.NaN;
+      return {
+        holderPid: Number.isInteger(pid2) && pid2 > 0 ? pid2 : undefined,
+        launcherPid: Number.isInteger(rawLauncherPid) && rawLauncherPid > 0 ? rawLauncherPid : undefined
+      };
+    } catch {
+      return {};
     }
   }
-  for (const [name, engine] of Object.entries(config.engines ?? {})) {
-    if (engine.kind === "agent" && engine.llmEngine) {
-      const fallback = config.engines?.[engine.llmEngine];
-      if (!fallback || fallback.kind !== "llm") {
-        ctx.addIssue({
-          code: exports_external.ZodIssueCode.custom,
-          path: ["engines", name, "llmEngine"],
-          message: "llmEngine must name an LLM engine"
-        });
-      }
-    }
+  const pid = Number.parseInt(trimmed, 10);
+  return { holderPid: Number.isInteger(pid) && pid > 0 ? pid : undefined };
+}
+
+// src/core/config/config-io.ts
+function readConfigText(configPath) {
+  try {
+    return readTextFile(configPath, "Config file");
+  } catch (err) {
+    if (err.code === "ENOENT")
+      return;
+    throw err;
+  }
+}
+function parseConfigText(text, sourcePath) {
+  const stripped = stripJsonComments(text);
+  const where = sourcePath ? ` at ${sourcePath}` : "";
+  let parsed;
+  try {
+    parsed = JSON.parse(stripped);
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    throw new ConfigError(`Failed to parse config JSON${where}: ${detail}`, "INVALID_CONFIG_FILE", "Edit the file to fix the JSON syntax error. Comments (// and /* */) are allowed; trailing commas are not.");
   }
-  const defaultEngine = config.defaults?.engine;
-  if (defaultEngine && !config.engines?.[defaultEngine]) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      path: ["defaults", "engine"],
-      message: "engine does not name a configured engine"
-    });
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new ConfigError(`Config file${where} must contain a JSON object at the root, got ${describeJsonRoot(parsed)}.`, "INVALID_CONFIG_FILE");
   }
-  const defaultLlm = config.defaults?.llmEngine;
-  if (defaultLlm && config.engines?.[defaultLlm]?.kind !== "llm") {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      path: ["defaults", "llmEngine"],
-      message: "llmEngine must name an LLM engine"
-    });
+  return parsed;
+}
+function describeJsonRoot(value) {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "an array";
+  if (typeof value === "string")
+    return "a string";
+  if (typeof value === "number")
+    return "a number";
+  if (typeof value === "boolean")
+    return "a boolean";
+  return typeof value;
+}
+function writeConfigAtomic(configPath, config) {
+  writeFileAtomic(configPath, `${JSON.stringify(config, null, 2)}
+`);
+}
+var MAX_CONFIG_BACKUPS = 5;
+function backupExistingConfig(configPath, now = new Date) {
+  if (!fs8.existsSync(configPath))
+    return;
+  const backupDir = path12.join(getCacheDir(), "config-backups");
+  fs8.mkdirSync(backupDir, { recursive: true, mode: 448 });
+  fs8.chmodSync(backupDir, 448);
+  const timestamp = now.toISOString().replace(/[.:]/g, "-");
+  let sequence = 0;
+  let timestamped;
+  while (true) {
+    timestamped = path12.join(backupDir, `config-${timestamp}${sequence === 0 ? "" : `-${sequence}`}.json`);
+    try {
+      fs8.copyFileSync(configPath, timestamped, fs8.constants.COPYFILE_EXCL);
+      break;
+    } catch (error2) {
+      if (error2.code !== "EEXIST")
+        throw error2;
+      sequence++;
+    }
   }
-  const workflowJudge = config.workflow?.judgeEngine;
-  if (workflowJudge && !config.engines?.[workflowJudge]) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      path: ["workflow", "judgeEngine"],
-      message: "judgeEngine does not name a configured engine"
-    });
+  const latest = path12.join(backupDir, "config.latest.json");
+  fs8.copyFileSync(configPath, latest);
+  fs8.chmodSync(timestamped, 384);
+  fs8.chmodSync(latest, 384);
+  pruneOldBackups(backupDir);
+  return { timestamped, latest };
+}
+function pruneOldBackups(backupDir) {
+  pruneToNewest(backupDir, MAX_CONFIG_BACKUPS, (entry) => entry.isFile() && isTimestampedConfigBackup(entry.name));
+}
+function isTimestampedConfigBackup(name) {
+  return name.startsWith("config-") && name.endsWith(".json") && name !== "config.latest.json";
+}
+function pruneToNewest(dir, keep, select) {
+  let entries;
+  try {
+    entries = fs8.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
   }
-  const defaultStrategy = config.defaults?.improveStrategy;
-  if (defaultStrategy && !BUILTIN_IMPROVE_STRATEGY_NAMES.includes(defaultStrategy) && !config.improve?.strategies?.[defaultStrategy]) {
-    ctx.addIssue({
-      code: exports_external.ZodIssueCode.custom,
-      path: ["defaults", "improveStrategy"],
-      message: "improveStrategy does not name a built-in or configured strategy"
-    });
+  const candidates = entries.filter(select).map((entry) => {
+    const full = path12.join(dir, entry.name);
+    let mtime = 0;
+    try {
+      mtime = fs8.statSync(full).mtimeMs;
+    } catch {}
+    return { path: full, mtime };
+  }).sort((a, b) => b.mtime - a.mtime);
+  for (const stale of candidates.slice(keep)) {
+    try {
+      fs8.rmSync(stale.path, { recursive: true, force: true });
+    } catch {}
   }
-  for (const [strategyName, strategy] of Object.entries(config.improve?.strategies ?? {})) {
-    const strategyEngine = strategy.engine;
-    if (strategyEngine) {
-      const engine = config.engines?.[strategyEngine];
-      if (!engine || engine.kind !== "llm") {
-        ctx.addIssue({
-          code: exports_external.ZodIssueCode.custom,
-          path: ["improve", "strategies", strategyName, "engine"],
-          message: engine ? "strategy engine must be an LLM engine" : "engine does not name a configured engine"
-        });
+}
+function getConfigLockPath() {
+  return path12.join(getConfigDir(), "config.json.lck");
+}
+var CONFIG_LOCK_MAX_RETRIES = 40;
+var CONFIG_LOCK_RETRY_DELAY_MS = 50;
+function sleepSyncMs(ms) {
+  sleepSync(ms);
+}
+function acquireConfigLock() {
+  const lockPath = getConfigLockPath();
+  try {
+    fs8.mkdirSync(path12.dirname(lockPath), { recursive: true });
+  } catch {}
+  for (let attempt = 0;attempt < CONFIG_LOCK_MAX_RETRIES; attempt++) {
+    try {
+      const ownership = tryAcquireLockSync(lockPath, createLockPayload());
+      if (ownership) {
+        return () => releaseLock(ownership);
       }
+    } catch (error2) {
+      throw new ConfigError(`Unable to acquire config lock at ${lockPath}: ${error2 instanceof Error ? error2.message : String(error2)}`, "INVALID_CONFIG_FILE");
     }
-    for (const [processName, process2] of Object.entries(strategy.processes ?? {})) {
-      const processConfig = process2;
-      const capability = IMPROVE_PROCESS_ENGINE_CAPABILITIES[processName];
-      if (processConfig.engine && capability === null) {
-        ctx.addIssue({
-          code: exports_external.ZodIssueCode.custom,
-          path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
-          message: `${processName} does not dispatch an engine`
-        });
-      } else {
-        const processEngine = processConfig.engine ?? strategyEngine;
-        if (processEngine && capability === "llm") {
-          const engine = config.engines?.[processEngine];
-          if (!engine || engine.kind !== "llm") {
-            ctx.addIssue({
-              code: exports_external.ZodIssueCode.custom,
-              path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
-              message: engine ? `${processName} requires an LLM engine` : "engine does not name a configured engine"
-            });
-          }
-        } else if (processConfig.engine && capability === "runner" && !config.engines?.[processConfig.engine]) {
-          ctx.addIssue({
-            code: exports_external.ZodIssueCode.custom,
-            path: ["improve", "strategies", strategyName, "processes", processName, "engine"],
-            message: "engine does not name a configured engine"
-          });
-        }
-      }
-      const judgmentEngine = processConfig.judgment?.engine;
-      if (processConfig.judgment?.enabled === true && judgmentEngine) {
-        const engine = config.engines?.[judgmentEngine];
-        if (!engine) {
-          ctx.addIssue({
-            code: exports_external.ZodIssueCode.custom,
-            path: ["improve", "strategies", strategyName, "processes", processName, "judgment", "engine"],
-            message: "engine does not name a configured engine"
-          });
-        }
-      }
+    const probe = probeLock(lockPath);
+    if (probe.state === "stale" && reclaimStaleLock(lockPath, probe)) {
+      continue;
     }
-  }
-  if (config.defaultWriteTarget !== undefined) {
-    const knownNames = Object.keys(config.bundles ?? {});
-    if (knownNames.length === 0) {
-      ctx.addIssue({
-        code: exports_external.ZodIssueCode.custom,
-        path: ["defaultWriteTarget"],
-        message: `defaultWriteTarget "${config.defaultWriteTarget}" cannot be resolved: no bundles configured. ` + "Add at least one entry to `bundles` first."
-      });
-    } else if (!knownNames.includes(config.defaultWriteTarget)) {
-      ctx.addIssue({
-        code: exports_external.ZodIssueCode.custom,
-        path: ["defaultWriteTarget"],
-        message: `defaultWriteTarget "${config.defaultWriteTarget}" does not match any configured bundle: ${knownNames.map((n) => `"${n}"`).join(", ")}.`
-      });
+    if (attempt < CONFIG_LOCK_MAX_RETRIES - 1) {
+      sleepSyncMs(CONFIG_LOCK_RETRY_DELAY_MS);
     }
   }
-});
+  throw new ConfigError(`Timed out waiting for config lock at ${lockPath}. Another AKM process may be updating config.`, "INVALID_CONFIG_FILE");
+}
+function withConfigLock(fn) {
+  const release = acquireConfigLock();
+  try {
+    return fn();
+  } finally {
+    release();
+  }
+}
 
 // src/core/config/config-sources.ts
 import { createHash } from "node:crypto";
@@ -36920,41 +36919,6 @@ function normalizeInstalledGitRef(source, ref) {
   return requestedRef ? `${cloneUrl}/tree/${requestedRef}` : cloneUrl;
 }
 
-// src/core/config/deep-merge.ts
-var UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
-function isPlainObject(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value))
-    return false;
-  const prototype = Object.getPrototypeOf(value);
-  return prototype === Object.prototype || prototype === null;
-}
-function copyConfigValue(value) {
-  if (Array.isArray(value))
-    return value.map(copyConfigValue);
-  if (!isPlainObject(value))
-    return value;
-  const copy = {};
-  for (const key of Object.keys(value)) {
-    if (UNSAFE_KEYS.has(key))
-      throw new TypeError(`Unsafe configuration key: ${key}`);
-    copy[key] = copyConfigValue(value[key]);
-  }
-  return copy;
-}
-function deepMergeConfig(base, override) {
-  const result = copyConfigValue(base);
-  for (const key of Object.keys(override)) {
-    if (UNSAFE_KEYS.has(key))
-      throw new TypeError(`Unsafe configuration key: ${key}`);
-    const next = override[key];
-    if (next === undefined)
-      continue;
-    const current = result[key];
-    result[key] = isPlainObject(current) && isPlainObject(next) ? deepMergeConfig(current, next) : copyConfigValue(next);
-  }
-  return result;
-}
-
 // src/core/config/config-walker.ts
 function unwrap(schema) {
   let current = schema;
@@ -37203,11 +37167,12 @@ ${lines}`, "INVALID_CONFIG_FILE");
   assertUniquePhysicalBundleRoots(finalResult.data, sourcePath);
   return finalResult.data;
 }
+var RETIRED_CATCHALL_KEY_PATHS = new Set(["index.graph", "index.metadataEnhance"]);
 function unknownConfigKeyPaths(root, node = root, prefix = []) {
   const found = [];
   for (const key of Object.keys(node).sort()) {
     const keyPath = [...prefix, key];
-    if (resolveSchemaAt(keyPath, root) === undefined) {
+    if (RETIRED_CATCHALL_KEY_PATHS.has(keyPath.join(".")) || resolveSchemaAt(keyPath, root) === undefined) {
       found.push(keyPath);
       continue;
     }
@@ -37498,6 +37463,9 @@ function normalizeConfigFile(configPath, options) {
     const body = withSchedulerOnDisk(configWriteBody(localRaw, current, next), next);
     for (const keyPath of unknownConfigKeyPaths(body))
       deleteConfigPath(body, keyPath);
+    const strategies = body.improve?.strategies;
+    if (strategies && Object.hasOwn(strategies, "graph-refresh"))
+      delete strategies["graph-refresh"];
     const keys = [...new Set([...Object.keys(raw), ...Object.keys(body)])].filter((key) => JSON.stringify(raw[key]) !== JSON.stringify(body[key])).sort();
     if (keys.length === 0 || !options.apply)
       return { keys, changed: keys.length > 0, applied: false };
@@ -37572,7 +37540,6 @@ function resolveSecret(value, resolveFromStore) {
     return resolved ?? "";
   });
 }
-var INDEX_RESERVED_KEYS = new Set(["metadataEnhance"]);
 
 // src/core/redaction.ts
 var ENV_PASSTHROUGH_REDACTION_POLICY = {
@@ -52777,6 +52744,7 @@ var LEDGER_HARD_OUTCOMES = new Set([
   "quality_rejected",
   "expired"
 ]);
+var hasContentHashColumnCache = new WeakMap;
 
 // src/commands/improve/improve-strategies.ts
 var REF_SCOPED_PROCESSES = new Set(["reflect", "distill", "consolidate"]);
@@ -52784,7 +52752,6 @@ var BUILTIN_STRATEGIES = {
   default: default_default,
   quick: quick_default,
   thorough: thorough_default,
-  "graph-refresh": graph_refresh_default,
   consolidate: consolidate_default,
   catchup: catchup_default,
   "reflect-distill": reflect_distill_default,