akm-cli 0.9.28-alpha.10 → 0.9.28-alpha.11

package/CHANGELOG.md

@@ -6,6 +6,29 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.9.28-alpha.11] - 2026-10-08
+
+### Fixed
+
+- **Skill resources that document `$ARGUMENTS` command templates no longer index as commands.** The command
+  placeholder matcher now respects a skill folder as declared context, and the indexer re-files existing entries
+  on the next incremental index (#1084).
+- **A proposal drain judge now sees overlapping promotions accepted earlier in the same drain (#1085).**
+- **`akm proposal drain --strategy <name>` now honors enabled triage judgment.** A named strategy with
+  `processes.triage.judgment.enabled: true` runs its configured judge without `--judgment`; the flag still
+  forces judgment for disabled strategies, and drains without `--strategy` keep their existing behavior (#1086).
+- **`akm upgrade` no longer defers the OpenCode plugin refresh for OpenCode servers running in containers
+  (#1099).** The "is OpenCode running" check counted an `opencode serve` inside a Docker container, which
+  keeps its own cache, so the host's refresh was deferred for as long as the container ran. On Linux a matching
+  process now counts only when it shares akm's mount namespace (or, where that is unreadable, when its cgroup
+  is not a docker/containerd/podman/lxc scope); a process that cannot be inspected still defers.
+- **Five test suites no longer leak their temp folders on a direct `bun test` (#1088).** The outcome-loop,
+  outcome-invariance, memory-improve-archive, plan-flag-cli and require-engines-cli suites created `akm-*`
+  directories under the OS temp dir and never removed them; `scripts/sweep-test-tmp.ts` swept them only for
+  `test-unit.sh`/`test-integration.sh` runs, so running a file straight with `bun test` left a folder per test
+  behind. Each suite now registers its temp dirs with the shared test sandbox helper (`makeSandboxDir`, drained
+  by an `afterEach`), the pattern the other suites already use.
+
 ## [0.9.28-alpha.10] - 2026-10-08
 
 ### Fixed

package/dist/commands/improve/consolidate/coverage.js

@@ -125,7 +125,7 @@ export function findCoveringKnowledge(db, bundleId, filePath, body) {
 }
 /** Knowledge docs a reviewer is shown for a promotion, nearest first. */
 export const NEIGHBOUR_NOTE_COUNT = 5;
-const NEIGHBOUR_EXCERPT_CHARS = 300;
+export const NEIGHBOUR_EXCERPT_CHARS = 300;
 /**
  * The knowledge notes nearest to the memory at `memoryPath`, for the drain's
  * judge to compare a promotion against: the nearest {@link NEIGHBOUR_NOTE_COUNT}

package/dist/commands/proposal/drain.js

@@ -28,7 +28,7 @@ import { info, warn } from "../../core/warn.js";
 import { DEFAULT_LLM_TIMEOUT_MS } from "../../integrations/agent/config.js";
 import { buildExecution, resolveExecution } from "../../integrations/agent/execution.js";
 import { assertRunnerCredentials, runExecution, } from "../../integrations/agent/runner-dispatch.js";
-import { nearestKnowledgeNotes } from "../improve/consolidate/coverage.js";
+import { NEIGHBOUR_EXCERPT_CHARS, NEIGHBOUR_NOTE_COUNT, nearestKnowledgeNotes, shingleContainment, wordShingles, } from "../improve/consolidate/coverage.js";
 import { errMessage, noticeSet } from "../improve/stage.js";
 import { akmProposalAccept, akmProposalReject } from "./proposal.js";
 import { isRetireProposal, PAIR_PASS_GATE, STALE_TARGET_GATE_REASON } from "./proposal-types.js";
@@ -242,6 +242,7 @@ async function runJudgmentTier(opts, result, pending, acceptBudget, promoteFn, r
     const byId = new Map(pending.map((p) => [p.id, p]));
     const notices = noticeSet();
     const stillDeferred = [];
+    const acceptedPromotions = [];
     const cappedBefore = result.skippedByCap.length;
     for (const item of result.deferred) {
         const proposal = byId.get(item.id);
@@ -254,7 +255,9 @@ async function runJudgmentTier(opts, result, pending, acceptBudget, promoteFn, r
             liveAsset,
             siblings: pending.filter((p) => p.ref === proposal.ref && p.id !== proposal.id),
             // A create the model otherwise judges blind: the model never sees knowledge/.
-            ...(liveAsset === undefined ? { neighbours: promotionNeighbours(opts.stashDir, proposal) } : {}),
+            ...(liveAsset === undefined
+                ? { neighbours: promotionNeighbours(opts.stashDir, proposal, acceptedPromotions) }
+                : {}),
         });
         const dispatch = await dispatchJudgment(opts.judgment, prompt, seams);
         notices.add(dispatch.notices);
@@ -314,6 +317,8 @@ async function runJudgmentTier(opts, result, pending, acceptBudget, promoteFn, r
         const outcome = await acceptProposal(opts, proposal, item.id, "judgment-accept", promoteFn, rejectFn, verdict.reason);
         if (outcome === "promoted") {
             result.promoted.push(item.id);
+            if (proposal.source === "consolidate" && proposal.promotionSource !== undefined)
+                acceptedPromotions.push(proposal);
             acceptBudget -= 1;
         }
         else if (outcome === "rejected") {
@@ -333,7 +338,7 @@ async function runJudgmentTier(opts, result, pending, acceptBudget, promoteFn, r
     result.deferred = stillDeferred;
 }
 /** The knowledge notes nearest to a consolidate promotion's source memory; none for any other proposal. */
-function promotionNeighbours(stashDir, proposal) {
+function promotionNeighbours(stashDir, proposal, acceptedPromotions) {
     if (proposal.source !== "consolidate" || proposal.promotionSource === undefined)
         return [];
     try {
@@ -341,7 +346,27 @@ function promotionNeighbours(stashDir, proposal) {
         const typeDir = stashDirFor(parsed.type);
         if (!typeDir)
             return [];
-        return nearestKnowledgeNotes(assetPathForName(parsed.type, path.join(stashDir, typeDir), parsed.name));
+        const memoryPath = assetPathForName(parsed.type, path.join(stashDir, typeDir), parsed.name);
+        const existing = nearestKnowledgeNotes(memoryPath);
+        const source = fs.readFileSync(memoryPath, "utf8");
+        const shingles = wordShingles(source);
+        // Promotions accepted earlier in this drain are not in the index yet; the
+        // ones sharing text with this memory join its neighbours (#1085).
+        const inDrain = acceptedPromotions
+            .map((accepted) => {
+            const parsedContent = parseFrontmatter(proposalContent(accepted));
+            const body = parsedContent.content;
+            return {
+                ref: accepted.ref,
+                description: typeof parsedContent.data.description === "string" ? parsedContent.data.description : "",
+                excerpt: body.length > NEIGHBOUR_EXCERPT_CHARS ? `${body.slice(0, NEIGHBOUR_EXCERPT_CHARS)}...` : body,
+                containment: shingleContainment(shingles, body),
+            };
+        })
+            .filter((note) => note.containment > 0)
+            .sort((a, b) => b.containment - a.containment)
+            .map(({ containment: _, ...note }) => note);
+        return [...inDrain, ...existing].slice(0, NEIGHBOUR_NOTE_COUNT);
     }
     catch {
         return [];

package/dist/commands/proposal/proposal-cli.js

@@ -401,12 +401,12 @@ const proposalDrainCommand = defineJsonCommand({
         },
         judgment: {
             type: "boolean",
-            description: "Explicitly enable the judgment tier for this drain (overrides judgment.enabled=false; agent/sdk per config). No-op with a logged triage_deferred summary when no runner is configured.",
+            description: "Enable the judgment tier for this drain (overrides judgment.enabled=false; agent/sdk per config). No-op with a logged triage_deferred summary when no runner is configured.",
             default: false,
         },
         strategy: {
             type: "string",
-            description: "Read the triage block (applyMode, ceilings, judgment) from this improve strategy.",
+            description: "Read the triage block (applyMode, ceilings, judgment) from this improve strategy; enabled judgment runs the judge.",
         },
     },
     async run({ args, rawArgs }) {
@@ -455,12 +455,11 @@ const proposalDrainCommand = defineJsonCommand({
             })
                 .map((proposal) => proposal.id));
         }
-        // Phase 3: --judgment is an invocation-level opt-in. It deliberately
-        // overrides judgment.enabled=false for this standalone drain while still
-        // reusing that block's execution overrides. Without the flag, configured
-        // judgment enablement is owned only by `akm improve`. A missing runner is
-        // a documented standalone no-op that leaves deferred items unresolved.
-        const judgmentResolution = args.judgment === true
+        // Phase 3: --judgment is an invocation-level opt-in that overrides a
+        // disabled block. An explicitly selected strategy may opt in through its
+        // judgment block; the implicit default strategy keeps standalone drain's
+        // historical no-judge behavior.
+        const judgmentResolution = args.judgment === true || (args.strategy !== undefined && triageConfig?.judgment?.enabled === true)
             ? resolveImproveExecution({
                 config: cfg,
                 profile: selectedStrategy.config,

package/dist/commands/sources/plugin-upgrade.js

@@ -237,21 +237,43 @@ export function lookupOpenCodeNext() {
     }
     return next;
 }
+const CONTAINER_CGROUP = /docker|containerd|podman|libpod|lxc/;
+/**
+ * Whether the process could use this host's OpenCode cache. A process in another mount namespace (a container's
+ * `opencode serve`) has its own cache; when that cannot be read, a container cgroup says the same. Anything
+ * unreadable counts as a host process, so the answer errs towards deferring.
+ */
+export function usesHostCache(pid, procRoot = "/proc") {
+    try {
+        return fs.readlinkSync(`${procRoot}/${pid}/ns/mnt`) === fs.readlinkSync(`${procRoot}/self/ns/mnt`);
+    }
+    catch {
+        // not readable (another user's process, or no such namespace file): look at the cgroup instead
+    }
+    try {
+        return !CONTAINER_CGROUP.test(fs.readFileSync(`${procRoot}/${pid}/cgroup`, "utf8"));
+    }
+    catch {
+        return true;
+    }
+}
 /** Whether an OpenCode process is running (its prefetch would be replaced under it). `undefined` when that cannot be told. */
 function openCodeRunning() {
     if (IS_WINDOWS) {
         const tasks = runCommand("tasklist", ["/FI", "IMAGENAME eq opencode.exe", "/NH"], READ_TIMEOUT_MS);
         return tasks.ok ? /opencode\.exe/i.test(tasks.stdout) : undefined;
     }
+    const linux = process.platform === "linux";
     // `-f` because a Node-wrapped opencode shows up as `node …/opencode`; the
     // pattern needs `opencode` to be a whole path segment so `akm-opencode`
     // in some other command's arguments does not match.
     const pgrep = runCommand("pgrep", ["-f", "(^|/)opencode( |$)"], READ_TIMEOUT_MS);
-    if (pgrep.ok)
-        return true;
+    if (pgrep.ok) {
+        return !linux || pgrep.stdout.split(/\s+/).some((pid) => /^\d+$/.test(pid) && usesHostCache(pid));
+    }
     if (!pgrep.missing)
         return false; // pgrep exits 1 when nothing matched
-    if (process.platform !== "linux")
+    if (!linux)
         return undefined;
     try {
         return fs.readdirSync("/proc").some((pid) => {
@@ -259,7 +281,7 @@ function openCodeRunning() {
                 return false;
             try {
                 const argv = fs.readFileSync(`/proc/${pid}/cmdline`, "utf8").split("\0");
-                return argv.slice(0, 2).some((arg) => path.basename(arg) === "opencode");
+                return argv.slice(0, 2).some((arg) => path.basename(arg) === "opencode") && usesHostCache(pid);
             }
             catch {
                 return false;

package/dist/core/adapter/adapters/akm-adapter.js

@@ -457,7 +457,8 @@ export const akmAdapter = {
     // file that has not changed: the version is folded into each directory's
     // freshness, so the next incremental `akm index` re-drains it and re-files
     // those rows (#1063). 0.9.1: a skill's resource is never retyped by a `$1`.
-    version: "0.9.1",
+    // 0.9.2: a skill's resource is never retyped by a `$ARGUMENTS` (#1084).
+    version: "0.9.2",
     // Recognized-extension HINT, derived from what the matchers accept (§6):
     // `.md` (Markdown types + workflow peer), `.yml` (task and workflow YAML),
     // `.yaml` (task near-miss diagnostics), `.env` (env files), and the 16

package/dist/indexer/walk/matchers.js

@@ -231,8 +231,10 @@ function classifyBySmartMd(ctx) {
         }
     }
     // `$ARGUMENTS` is unambiguous, so it keeps its long-standing precedence: a
-    // command dropped under `knowledge/` is still found as a command.
-    if (ARGUMENTS_PLACEHOLDER_RE.test(body)) {
+    // command dropped under `knowledge/` is still found as a command. A skill's
+    // folder is the one declared context it defers to — a file there is a skill
+    // resource, so documenting a command template must not retype it (#1084).
+    if (ARGUMENTS_PLACEHOLDER_RE.test(body) && !isNestedSkillResource(ctx)) {
         return SMART_MD_FACTS.command;
     }
     // A NUMERIC placeholder is a guess, and a typed directory is a declaration.

package/dist/scripts/akm-migrate-node.js

@@ -40534,7 +40534,7 @@ function classifyBySmartMd(ctx) {
       return SMART_MD_FACTS.command;
     }
   }
-  if (ARGUMENTS_PLACEHOLDER_RE.test(body)) {
+  if (ARGUMENTS_PLACEHOLDER_RE.test(body) && !isNestedSkillResource(ctx)) {
     return SMART_MD_FACTS.command;
   }
   if (NUMERIC_PLACEHOLDER_RE.test(body) && !hasDeclaredDirType(ctx)) {
@@ -45095,7 +45095,7 @@ async function validate2(c, changes, ctx) {
 }
 var akmAdapter = {
   id: "akm",
-  version: "0.9.1",
+  version: "0.9.2",
   extensions: [
     ".md",
     ".yaml",

package/dist/scripts/akm-migrate.js

@@ -39862,7 +39862,7 @@ function classifyBySmartMd(ctx) {
       return SMART_MD_FACTS.command;
     }
   }
-  if (ARGUMENTS_PLACEHOLDER_RE.test(body)) {
+  if (ARGUMENTS_PLACEHOLDER_RE.test(body) && !isNestedSkillResource(ctx)) {
     return SMART_MD_FACTS.command;
   }
   if (NUMERIC_PLACEHOLDER_RE.test(body) && !hasDeclaredDirType(ctx)) {
@@ -44423,7 +44423,7 @@ async function validate2(c, changes, ctx) {
 }
 var akmAdapter = {
   id: "akm",
-  version: "0.9.1",
+  version: "0.9.2",
   extensions: [
     ".md",
     ".yaml",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akm-cli",
-  "version": "0.9.28-alpha.10",
+  "version": "0.9.28-alpha.11",
   "type": "module",
   "description": "akm (Agent Knowledge Manager) — a portable, local-first capability library for AI agents. Discover, load, share, and improve reusable skills, scripts, workflows, and knowledge across any shell-capable coding agent, including Claude Code, OpenCode, and Cursor.",
   "keywords": [