akm-cli 0.9.5 → 0.9.6

package/dist/workflows/parser.js

@@ -38,7 +38,7 @@ import { formatExtraParamsIssue, validateExtraParams } from "../core/extra-param
 import { checkJsonSchemaDefinition, JSON_SCHEMA_SUBSET_SUPPORTED_KEYWORDS } from "../core/json-schema.js";
 import { parseReference } from "./program/expressions.js";
 import { PROGRAM_ISOLATION_KINDS, PROGRAM_ON_ERROR, PROGRAM_PARAM_NAME_PATTERN, PROGRAM_REDUCERS, PROGRAM_RETRY_REASONS, PROGRAM_STEP_ID_PATTERN, } from "./program/schema.js";
-import { jsonBytes, utf8Bytes, WORKFLOW_ENGINE_NAME_PATTERN, WORKFLOW_ENV_VAR_NAME_PATTERN, WORKFLOW_MAX_CONCURRENCY, WORKFLOW_MAX_ENGINE_NAME_LENGTH, WORKFLOW_MAX_EXEC_ARG_BYTES, WORKFLOW_MAX_EXEC_ARGV, WORKFLOW_MAX_EXEC_CWD_LENGTH, WORKFLOW_MAX_EXEC_PASS_ENV, WORKFLOW_MAX_EXTRA_PARAMS_BYTES, WORKFLOW_MAX_GATE_LOOPS, WORKFLOW_MAX_INPUTS, WORKFLOW_MAX_MAP_EXPANSION, WORKFLOW_MAX_OUTPUTS, WORKFLOW_MAX_PARAMS, WORKFLOW_MAX_RETRIES, WORKFLOW_MAX_ROUTE_BRANCHES, WORKFLOW_MAX_SCHEMA_BYTES, WORKFLOW_MAX_SOURCE_BYTES, WORKFLOW_MAX_STEPS, WORKFLOW_MAX_TIMEOUT_MS, } from "./resource-limits.js";
+import { jsonBytes, utf8Bytes, WORKFLOW_ENGINE_NAME_PATTERN, WORKFLOW_ENV_VAR_NAME_PATTERN, WORKFLOW_MAX_CONCURRENCY, WORKFLOW_MAX_ENGINE_NAME_LENGTH, WORKFLOW_MAX_EXTRA_PARAMS_BYTES, WORKFLOW_MAX_SCHEMA_BYTES, WORKFLOW_MAX_SOURCE_BYTES, WORKFLOW_MAX_TIMEOUT_MS, } from "./resource-limits.js";
 import { WORKFLOW_SCHEMA_VERSION, } from "./schema.js";
 import { runSemanticChecks } from "./validator.js";
 /** Envelope keys every AKM markdown asset carries ($ref'd from schemas/akm-asset-envelope.json). */
@@ -406,9 +406,6 @@ function parseParams(ctx, raw) {
         ctx.err(["params"], `"params" must be a mapping of param name to a JSON Schema object (e.g. changed_files: { type: array }).`);
         return undefined;
     }
-    if (Object.keys(raw).length > WORKFLOW_MAX_PARAMS) {
-        ctx.err(["params"], `"params" must contain at most ${WORKFLOW_MAX_PARAMS} entries.`);
-    }
     const params = {};
     for (const [paramName, value] of Object.entries(raw)) {
         if (!PROGRAM_PARAM_NAME_PATTERN.test(paramName)) {
@@ -448,9 +445,6 @@ function parseOutputs(ctx, raw) {
         ctx.err(["outputs"], `"outputs" must be a mapping of output name to { from, schema? } (e.g. report: { from: steps.summarize.output }).`);
         return undefined;
     }
-    if (Object.keys(raw).length > WORKFLOW_MAX_OUTPUTS) {
-        ctx.err(["outputs"], `"outputs" must contain at most ${WORKFLOW_MAX_OUTPUTS} entries.`);
-    }
     const outputs = {};
     for (const [outputName, value] of Object.entries(raw)) {
         const path = ["outputs", outputName];
@@ -546,14 +540,11 @@ function parseBudget(ctx, raw) {
         }
     }
     if (raw.max_units !== undefined) {
-        if (typeof raw.max_units === "number" &&
-            Number.isInteger(raw.max_units) &&
-            raw.max_units >= 1 &&
-            raw.max_units <= WORKFLOW_MAX_MAP_EXPANSION) {
+        if (typeof raw.max_units === "number" && Number.isInteger(raw.max_units) && raw.max_units >= 1) {
             budget.maxUnits = raw.max_units;
         }
         else {
-            ctx.err([...path, "max_units"], `"budget.max_units" must be an integer from 1 through ${WORKFLOW_MAX_MAP_EXPANSION}.`);
+            ctx.err([...path, "max_units"], `"budget.max_units" must be an integer >= 1.`);
         }
     }
     return Object.keys(budget).length > 0 ? budget : undefined;
@@ -563,9 +554,6 @@ function parseSteps(ctx, raw) {
         ctx.err(["steps"], `"steps" is required and must be a list with at least one step.`);
         return [];
     }
-    if (raw.length > WORKFLOW_MAX_STEPS) {
-        ctx.err(["steps"], `"steps" must contain at most ${WORKFLOW_MAX_STEPS} entries.`);
-    }
     // First pass: collect ids so route targets can be checked against ALL steps
     // (including ones that fail their own validation).
     const idIndex = new Map();
@@ -775,11 +763,6 @@ function parseExecPassEnv(ctx, raw, path, stepLabel) {
             `akm's own environment, e.g. pass_env: [CARGO_HOME]. Values never appear here — use "env:" bindings for those.`);
         return undefined;
     }
-    if (raw.length > WORKFLOW_MAX_EXEC_PASS_ENV) {
-        ctx.err(path, `${stepLabel} "exec.pass_env" must have at most ${WORKFLOW_MAX_EXEC_PASS_ENV} entries. A command needing ` +
-            `more than that should use explicit named "env:" bindings instead.`);
-        return undefined;
-    }
     const names = [];
     for (const [index, entry] of raw.entries()) {
         if (typeof entry !== "string" || !WORKFLOW_ENV_VAR_NAME_PATTERN.test(entry)) {
@@ -795,17 +778,13 @@ function parseExecPassEnv(ctx, raw, path, stepLabel) {
     }
     return names;
 }
-/** The argv array itself: 1..WORKFLOW_MAX_EXEC_ARGV bounded non-empty strings. */
+/** The argv array itself: a non-empty list of non-empty strings. */
 function parseExecCommand(ctx, raw, path, stepLabel) {
     if (!Array.isArray(raw) || raw.length === 0) {
         ctx.err(path, `${stepLabel} "exec" requires "command": a non-empty argv list, e.g. command: ["bun", "run", "test:unit"]. ` +
             `A single shell string is not accepted — the command is spawned directly, never through a shell.`);
         return undefined;
     }
-    if (raw.length > WORKFLOW_MAX_EXEC_ARGV) {
-        ctx.err(path, `${stepLabel} "exec.command" must have at most ${WORKFLOW_MAX_EXEC_ARGV} entries.`);
-        return undefined;
-    }
     const argv = [];
     for (const [index, entry] of raw.entries()) {
         if (typeof entry !== "string" || entry === "") {
@@ -816,10 +795,6 @@ function parseExecCommand(ctx, raw, path, stepLabel) {
             ctx.err([...path, index], `${stepLabel} "exec.command[${index}]" may not contain NUL bytes.`);
             return undefined;
         }
-        if (utf8Bytes(entry) > WORKFLOW_MAX_EXEC_ARG_BYTES) {
-            ctx.err(path, `${stepLabel} "exec.command[${index}]" exceeds ${WORKFLOW_MAX_EXEC_ARG_BYTES} bytes.`);
-            return undefined;
-        }
         argv.push(entry);
     }
     return argv;
@@ -837,10 +812,6 @@ function parseExecCwd(ctx, raw, path, stepLabel) {
         return undefined;
     }
     const value = raw.trim();
-    if (value.length > WORKFLOW_MAX_EXEC_CWD_LENGTH) {
-        ctx.err(path, `${stepLabel} "exec.cwd" exceeds ${WORKFLOW_MAX_EXEC_CWD_LENGTH} characters.`);
-        return undefined;
-    }
     if (!isContainedRelativePath(value)) {
         ctx.err(path, `${stepLabel} "exec.cwd" (${JSON.stringify(value)}) must be a RELATIVE path inside the unit's working ` +
             `directory — absolute paths, Windows drive letters, "~", and ".." segments are rejected.`);
@@ -876,14 +847,11 @@ function parseMap(ctx, raw, path, stepLabel) {
     }
     let concurrency;
     if (raw.concurrency !== undefined) {
-        if (typeof raw.concurrency === "number" &&
-            Number.isInteger(raw.concurrency) &&
-            raw.concurrency > 0 &&
-            raw.concurrency <= WORKFLOW_MAX_CONCURRENCY) {
-            concurrency = raw.concurrency;
+        if (typeof raw.concurrency === "number" && Number.isInteger(raw.concurrency) && raw.concurrency > 0) {
+            concurrency = Math.min(raw.concurrency, WORKFLOW_MAX_CONCURRENCY);
         }
         else {
-            ctx.err([...path, "concurrency"], `${stepLabel} "concurrency" must be an integer from 1 through ${WORKFLOW_MAX_CONCURRENCY}.`);
+            ctx.err([...path, "concurrency"], `${stepLabel} "concurrency" must be a positive integer.`);
         }
     }
     const reducer = parseEnumField(ctx, raw.reducer, [...path, "reducer"], `${stepLabel} "reducer"`, PROGRAM_REDUCERS);
@@ -917,9 +885,6 @@ function parseRoute(ctx, raw, path, stepLabel, stepIndex, routeChecks) {
         ctx.err(whenPath, `${stepLabel} "route" requires "when": a non-empty list of { match, step } branches (e.g. when: [{ match: pass, step: ship }]).`);
     }
     else {
-        if (raw.when.length > WORKFLOW_MAX_ROUTE_BRANCHES) {
-            ctx.err(whenPath, `${stepLabel} "when" must contain at most ${WORKFLOW_MAX_ROUTE_BRANCHES} branches.`);
-        }
         const seenMatches = new Map();
         raw.when.forEach((branch, i) => {
             const branchPath = [...whenPath, i];
@@ -980,9 +945,6 @@ function parseInputs(ctx, raw, path, stepLabel) {
         ctx.err(path, `${stepLabel} "inputs" must be a non-empty list of reference strings.`);
         return undefined;
     }
-    if (raw.length > WORKFLOW_MAX_INPUTS) {
-        ctx.err(path, `${stepLabel} "inputs" must contain at most ${WORKFLOW_MAX_INPUTS} entries.`);
-    }
     const out = [];
     // The frozen-plan decoder requires uniqueness (validateStringArray(..., true)),
     // so duplicates parsed and linted clean and then failed the run with an
@@ -1012,14 +974,11 @@ function parseGate(ctx, raw, path, stepLabel) {
     checkUnknownKeys(ctx, raw, path, GATE_KEYS, `${stepLabel} "gate"`);
     const gate = {};
     if (raw.max_loops !== undefined) {
-        if (typeof raw.max_loops === "number" &&
-            Number.isInteger(raw.max_loops) &&
-            raw.max_loops >= 1 &&
-            raw.max_loops <= WORKFLOW_MAX_GATE_LOOPS) {
+        if (typeof raw.max_loops === "number" && Number.isInteger(raw.max_loops) && raw.max_loops >= 1) {
             gate.maxLoops = raw.max_loops;
         }
         else {
-            ctx.err([...path, "max_loops"], `${stepLabel} "gate.max_loops" must be an integer from 1 through ${WORKFLOW_MAX_GATE_LOOPS}.`);
+            ctx.err([...path, "max_loops"], `${stepLabel} "gate.max_loops" must be an integer of at least 1.`);
         }
     }
     return gate;
@@ -1056,8 +1015,8 @@ function parseRetry(ctx, raw, path, stepLabel) {
     }
     checkUnknownKeys(ctx, raw, path, RETRY_KEYS, `${stepLabel} "retry"`);
     let ok = true;
-    if (!(typeof raw.max === "number" && Number.isInteger(raw.max) && raw.max >= 0 && raw.max <= WORKFLOW_MAX_RETRIES)) {
-        ctx.err([...path, "max"], `${stepLabel} "retry.max" is required and must be an integer from 0 through ${WORKFLOW_MAX_RETRIES}.`);
+    if (!(typeof raw.max === "number" && Number.isInteger(raw.max) && raw.max >= 0)) {
+        ctx.err([...path, "max"], `${stepLabel} "retry.max" is required and must be a non-negative integer.`);
         ok = false;
     }
     const on = [];

package/dist/workflows/renderer.js

@@ -87,9 +87,8 @@ function projectParameters(sourceIr) {
  * visible in the workflow file `show` is rendering, and (b) pointless to clip:
  * the whole finding this projection answers is `show` describing something
  * other than what runs, and a truncated argv is that same bug in miniature.
- * The parser bounds it anyway (`WORKFLOW_MAX_EXEC_ARGV` entries of
- * `WORKFLOW_MAX_EXEC_ARG_BYTES`), and it is far smaller than the step
- * `instructions` this same projection already carries whole.
+ * It is far smaller than the step `instructions` this same projection
+ * already carries whole.
  */
 function summarizeStepOrchestration(step, defaults) {
     const unit = step.unit;

package/dist/workflows/resource-limits.js

@@ -4,22 +4,12 @@
 import { EXECUTION_MAX_TIMEOUT_MS } from "../execution/limits.js";
 export const WORKFLOW_MAX_PLAN_BYTES = 2 * 1024 * 1024;
 export const WORKFLOW_MAX_SOURCE_BYTES = 1024 * 1024;
-export const WORKFLOW_MAX_STEPS = 256;
-export const WORKFLOW_MAX_ENGINES = 64;
-export const WORKFLOW_MAX_PARAMS = 128;
-export const WORKFLOW_MAX_ROUTE_BRANCHES = 256;
 export const WORKFLOW_MAX_INSTRUCTION_BYTES = 256 * 1024;
 export const WORKFLOW_MAX_SCHEMA_BYTES = 256 * 1024;
 export const WORKFLOW_MAX_EXTRA_PARAMS_BYTES = 64 * 1024;
-export const WORKFLOW_MAX_JSON_DEPTH = 64;
-export const WORKFLOW_MAX_MAP_EXPANSION = 10_000;
-/** Max declared `inputs:` reference strings on one unit/map step. */
-export const WORKFLOW_MAX_INPUTS = 64;
-/** Max declared `outputs:` entries on one workflow document (P3b, spec §4.1). */
-export const WORKFLOW_MAX_OUTPUTS = 64;
 // ── Dispatch-significant bounds shared across validation layers ──────────────
 //
-// Defined ONCE here so the three enforcement layers cannot drift:
+// Defined ONCE here so the enforcement layers cannot drift:
 //   1. the parser (`../parser.ts`) — line-anchored authoring-time errors,
 //   2. the published JSON Schema (`schemas/akm-workflow.json`) — mirrored
 //      `maximum`/`pattern`/`maxLength` values, pinned against these constants
@@ -31,33 +21,12 @@ export const WORKFLOW_MAX_OUTPUTS = 64;
 // `workflow create` already said the document was fine.
 /** Max per-step map fan-out concurrency (also the run-level concurrency ceiling). */
 export const WORKFLOW_MAX_CONCURRENCY = 64;
-/** Max evaluator-optimizer gate loops per step. */
-export const WORKFLOW_MAX_GATE_LOOPS = 100;
-/** Max retry attempts per unit. */
-export const WORKFLOW_MAX_RETRIES = 100;
 /** Max timeout in milliseconds (setTimeout's 32-bit signed ceiling: 2^31-1, ~24.8 days). */
 export const WORKFLOW_MAX_TIMEOUT_MS = EXECUTION_MAX_TIMEOUT_MS;
 /** Engine names: lowercase dash-separated runs of letters/digits, starting with a letter. */
 export const WORKFLOW_ENGINE_NAME_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
 export const WORKFLOW_MAX_ENGINE_NAME_LENGTH = 63;
 // ── exec (shell) unit bounds ─────────────────────────────────────────────────
-/**
- * Max entries in an exec unit's `command:` argv array. Generous for a real
- * command line, small enough that a corrupted plan cannot ask the OS to spawn
- * a megabyte of arguments.
- */
-export const WORKFLOW_MAX_EXEC_ARGV = 64;
-/** Max UTF-8 bytes of ONE argv entry (well under every platform's ARG_MAX per-arg limit). */
-export const WORKFLOW_MAX_EXEC_ARG_BYTES = 4096;
-/** Max characters of an exec unit's relative `cwd:`. */
-export const WORKFLOW_MAX_EXEC_CWD_LENGTH = 1024;
-/**
- * Max entries in an exec unit's `pass_env:` list.
- *
- * `pass_env` is bounded; use explicit named `env:` bindings for a larger set.
- * New v4 starts do not offer whole-process inheritance.
- */
-export const WORKFLOW_MAX_EXEC_PASS_ENV = 32;
 /**
  * Grammar for an env var NAME in `pass_env:`. Matches the frozen-plan
  * `envPassthrough` grammar in `ir/schema.ts` so both allowlist surfaces accept
@@ -86,8 +55,7 @@ export const DEFAULT_EXEC_TIMEOUT_MS = 600_000;
  * ten minutes to do so. What the cap buys is a BOUND where there was none: the
  * retained prefix is promoted into the unit's outcome text and every outcome is
  * held until the step reduces, so the worst case is (units in the STEP × this
- * cap) rather than unbounded — the step's width, not the in-flight width, is
- * what sizes it, up to {@link WORKFLOW_MAX_MAP_EXPANSION}.
+ * cap) — the step's width, not the in-flight width, is what sizes it.
  *
  * On reaching the cap the reader switches to DRAIN-AND-DISCARD: it keeps
  * pulling from the pipe (so the child never blocks on backpressure) and stops
@@ -180,11 +148,10 @@ export function clip(text, max) {
  *
  * The promoted step artifact (`evidence.output`) is deliberately NOT clipped
  * when it is built — gates judge the full artifact and downstream
- * `steps.<id>.output` references need it intact — but a `collect`
- * reducer over a fan-out bounded only by {@link WORKFLOW_MAX_MAP_EXPANSION}
- * (10 000 units, each contributing up to a full unit result) would otherwise
- * write an unbounded blob into a single SQLite row. Persistence is therefore
- * bounded here, at the write boundary, by
+ * `steps.<id>.output` references need it intact — but a `collect` reducer
+ * over an unbounded fan-out (each unit contributing up to a full unit
+ * result) would otherwise write an unbounded blob into a single SQLite row.
+ * Persistence is therefore bounded here, at the write boundary, by
  * `clipStepEvidenceForPersistence` (`runtime/runs.ts`), which replaces
  * oversized values with an explicitly-marked truncation envelope rather than
  * silently shortening them.
@@ -213,8 +180,11 @@ export function jsonBytes(value) {
 // (`src/workflows/ir/schema-v4.ts`'s recursive `decodeChildWorkflowTarget`).
 // Full design history, including the rejected alternative for the byte cap:
 // docs/architecture/decisions/0007-workflow-composition-bounds.md.
-/** Max workflow composition depth (root = depth 0; a 9th descendant level fails). */
-export const WORKFLOW_MAX_COMPOSITION_DEPTH = 8;
+//
+// Composition DEPTH is unbounded — `assertNoCompositionCycle` (freeze/targets/
+// child-workflow.ts) already makes infinite composition mathematically
+// impossible, so a depth ceiling on top of it only bounded how many
+// legitimately distinct workflows an author could nest.
 /**
  * Max AGGREGATE canonical-JSON bytes of every embedded child plan in ONE root
  * freeze (the sum across the whole composition tree, not per child).

package/dist/workflows/runtime/runs.js

@@ -396,10 +396,9 @@ export function isTruncatedEvidence(value) {
  * `buildEvidence` (exec/step-work.ts) promotes `evidence.output` UNCLIPPED by
  * design: gates judge the full promoted artifact and the in-memory
  * {@link StepExecutionResult} carries it to the caller intact. Nothing bounded
- * the PERSISTED form, though — a `collect` reducer over a fan-out capped only by
- * `WORKFLOW_MAX_MAP_EXPANSION` (10 000 units) can serialize to hundreds of
- * megabytes. This is the write boundary, so the bound lives here rather than in
- * the shared step-semantics module.
+ * the PERSISTED form, though — a `collect` reducer over an unbounded fan-out
+ * can serialize to hundreds of megabytes. This is the write boundary, so the
+ * bound lives here rather than in the shared step-semantics module.
  *
  * Over-cap values are REPLACED (largest top-level entry BY UTF-8 BYTES first —
  * the unit the cap is measured in — until the row fits) with a

package/dist/workflows/source-ir/schema.js

@@ -14,7 +14,7 @@ import { validateExtraParams } from "../../core/extra-params.js";
 import { checkJsonSchemaDefinition } from "../../core/json-schema.js";
 import { parseReference } from "../program/expressions.js";
 import { PROGRAM_RETRY_REASONS } from "../program/schema.js";
-import { jsonBytes, utf8Bytes, WORKFLOW_ENGINE_NAME_PATTERN, WORKFLOW_ENV_VAR_NAME_PATTERN, WORKFLOW_MAX_CONCURRENCY, WORKFLOW_MAX_ENGINE_NAME_LENGTH, WORKFLOW_MAX_EXEC_ARG_BYTES, WORKFLOW_MAX_EXEC_ARGV, WORKFLOW_MAX_EXEC_CWD_LENGTH, WORKFLOW_MAX_EXEC_PASS_ENV, WORKFLOW_MAX_EXTRA_PARAMS_BYTES, WORKFLOW_MAX_GATE_LOOPS, WORKFLOW_MAX_INPUTS, WORKFLOW_MAX_MAP_EXPANSION, WORKFLOW_MAX_OUTPUTS, WORKFLOW_MAX_PARAMS, WORKFLOW_MAX_RETRIES, WORKFLOW_MAX_ROUTE_BRANCHES, WORKFLOW_MAX_SCHEMA_BYTES, WORKFLOW_MAX_TIMEOUT_MS, } from "../resource-limits.js";
+import { jsonBytes, WORKFLOW_ENGINE_NAME_PATTERN, WORKFLOW_ENV_VAR_NAME_PATTERN, WORKFLOW_MAX_CONCURRENCY, WORKFLOW_MAX_ENGINE_NAME_LENGTH, WORKFLOW_MAX_EXTRA_PARAMS_BYTES, WORKFLOW_MAX_SCHEMA_BYTES, WORKFLOW_MAX_TIMEOUT_MS, } from "../resource-limits.js";
 import { compareWorkflowSourceCodePoints } from "./compare.js";
 import { canonicalizeWorkflowCron, canonicalizeWorkflowRun, canonicalizeWorkflowWorkingDirectory, classifyWorkflowStepUses, rejectNulInArgv, validateWorkflowBuiltinCommand, WorkflowSourceSemanticError, } from "./semantics.js";
 export const WORKFLOW_SOURCE_IR_VERSION = 1;
@@ -255,7 +255,7 @@ function validateStep(value, jobId, index, stepIds, options) {
     }
     validateMap(step.map, `step ${id} map`);
     validateRoute(step.route, `step ${id} route`);
-    optionalStringList(step.inputs, `step ${id} inputs`, WORKFLOW_MAX_INPUTS);
+    optionalStringList(step.inputs, `step ${id} inputs`, Infinity);
     if (Array.isArray(step.inputs)) {
         for (const [inputIndex, input] of step.inputs.entries())
             validateReference(input, `step ${id} inputs[${inputIndex}]`);
@@ -277,12 +277,7 @@ function validateExec(value, location, options) {
         return;
     const exec = record(value, location);
     keys(exec, ["command", "cwd", "passEnv"], location);
-    stringList(exec.command, `${location}.command`, WORKFLOW_MAX_EXEC_ARGV, false);
-    for (const [index, argument] of exec.command.entries()) {
-        if (utf8Bytes(argument) > WORKFLOW_MAX_EXEC_ARG_BYTES) {
-            fail(`${location}.command[${index}] exceeds ${WORKFLOW_MAX_EXEC_ARG_BYTES} bytes`);
-        }
-    }
+    stringList(exec.command, `${location}.command`, Infinity, false);
     try {
         rejectNulInArgv(exec.command);
     }
@@ -291,9 +286,6 @@ function validateExec(value, location, options) {
     }
     optionalString(exec.cwd, `${location}.cwd`);
     if (exec.cwd !== undefined) {
-        if (exec.cwd.length > WORKFLOW_MAX_EXEC_CWD_LENGTH) {
-            fail(`${location}.cwd exceeds ${WORKFLOW_MAX_EXEC_CWD_LENGTH} characters`);
-        }
         try {
             exec.cwd = canonicalizeWorkflowWorkingDirectory(exec.cwd, options.workspaceRoot);
         }
@@ -302,7 +294,7 @@ function validateExec(value, location, options) {
         }
     }
     if (exec.passEnv !== undefined) {
-        stringList(exec.passEnv, `${location}.passEnv`, WORKFLOW_MAX_EXEC_PASS_ENV, false);
+        stringList(exec.passEnv, `${location}.passEnv`, Infinity, false);
     }
     if (Array.isArray(exec.passEnv)) {
         for (const name of exec.passEnv) {
@@ -359,8 +351,8 @@ function validateRetry(value, location) {
         return;
     const retry = record(value, location);
     keys(retry, ["max", "on"], location);
-    if (!Number.isSafeInteger(retry.max) || retry.max < 0 || retry.max > WORKFLOW_MAX_RETRIES) {
-        fail(`${location}.max must be an integer from 0 through ${WORKFLOW_MAX_RETRIES}`);
+    if (!Number.isSafeInteger(retry.max) || retry.max < 0) {
+        fail(`${location}.max must be a non-negative integer`);
     }
     stringList(retry.on, `${location}.on`, PROGRAM_RETRY_REASONS.length, false);
     for (const reason of retry.on) {
@@ -393,10 +385,8 @@ function validateRoute(value, location) {
     keys(route, ["input", "branches", "defaultStepId"], location);
     nonEmptyString(route.input, `${location}.input`);
     validateReference(route.input, `${location}.input`);
-    if (!Array.isArray(route.branches) ||
-        route.branches.length === 0 ||
-        route.branches.length > WORKFLOW_MAX_ROUTE_BRANCHES) {
-        fail(`${location}.branches must contain 1 through ${WORKFLOW_MAX_ROUTE_BRANCHES} entries`);
+    if (!Array.isArray(route.branches) || route.branches.length === 0) {
+        fail(`${location}.branches must be a non-empty array`);
     }
     const matches = new Set();
     for (const [index, value] of route.branches.entries()) {
@@ -416,11 +406,8 @@ function validateGate(value, location) {
         return;
     const gate = record(value, location);
     keys(gate, ["maxLoops", "rubric"], location);
-    if (gate.maxLoops !== undefined &&
-        (!Number.isSafeInteger(gate.maxLoops) ||
-            gate.maxLoops < 1 ||
-            gate.maxLoops > WORKFLOW_MAX_GATE_LOOPS)) {
-        fail(`${location}.maxLoops must be an integer from 1 through ${WORKFLOW_MAX_GATE_LOOPS}`);
+    if (gate.maxLoops !== undefined && (!Number.isSafeInteger(gate.maxLoops) || gate.maxLoops < 1)) {
+        fail(`${location}.maxLoops must be an integer of at least 1`);
     }
     optionalString(gate.rubric, `${location}.rubric`);
 }
@@ -453,8 +440,8 @@ function validateParams(value) {
     if (value === undefined)
         return;
     const params = record(value, "params");
-    if (Object.keys(params).length === 0 || Object.keys(params).length > WORKFLOW_MAX_PARAMS) {
-        fail(`params must contain 1 through ${WORKFLOW_MAX_PARAMS} entries`);
+    if (Object.keys(params).length === 0) {
+        fail(`params must contain at least one entry`);
     }
     for (const [name, schema] of Object.entries(params)) {
         if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name))
@@ -472,8 +459,8 @@ function validateOutputs(value) {
     if (value === undefined)
         return;
     const outputs = record(value, "outputs");
-    if (Object.keys(outputs).length === 0 || Object.keys(outputs).length > WORKFLOW_MAX_OUTPUTS) {
-        fail(`outputs must contain 1 through ${WORKFLOW_MAX_OUTPUTS} entries`);
+    if (Object.keys(outputs).length === 0) {
+        fail(`outputs must contain at least one entry`);
     }
     for (const [name, declaration] of Object.entries(outputs)) {
         if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name))
@@ -496,9 +483,6 @@ function validateBudget(value) {
             fail(`budget.${key} must be a positive integer`);
         }
     }
-    if (typeof budget.maxUnits === "number" && budget.maxUnits > WORKFLOW_MAX_MAP_EXPANSION) {
-        fail(`budget.maxUnits must be at most ${WORKFLOW_MAX_MAP_EXPANSION}`);
-    }
 }
 function validateLlm(value, location) {
     if (value === undefined)

package/dist/workflows/validator.js

@@ -16,7 +16,7 @@
  * resource limits).
  */
 import { bundleRefToString, parseBundleRef } from "../core/asset/asset-ref.js";
-import { utf8Bytes, WORKFLOW_MAX_INSTRUCTION_BYTES, WORKFLOW_MAX_PARAMS, WORKFLOW_MAX_STEPS } from "./resource-limits.js";
+import { utf8Bytes, WORKFLOW_MAX_INSTRUCTION_BYTES } from "./resource-limits.js";
 export function runSemanticChecks(draft, frontmatterData, frontmatterEndLine, errors) {
     checkXrefs(frontmatterData.xrefs, frontmatterEndLine, errors);
     checkResourceLimits(draft, errors);
@@ -43,12 +43,6 @@ function checkXrefs(value, line, errors) {
     }
 }
 function checkResourceLimits(draft, errors) {
-    if (draft.steps.length > WORKFLOW_MAX_STEPS) {
-        errors.push({ line: 1, message: `Workflow must contain at most ${WORKFLOW_MAX_STEPS} steps.` });
-    }
-    if (Object.keys(draft.params ?? {}).length > WORKFLOW_MAX_PARAMS) {
-        errors.push({ line: 1, message: `Workflow must contain at most ${WORKFLOW_MAX_PARAMS} parameters.` });
-    }
     for (const step of draft.steps) {
         if (step.instructions && utf8Bytes(step.instructions.text) > WORKFLOW_MAX_INSTRUCTION_BYTES) {
             errors.push({

package/docs/reference/configuration.md

@@ -366,7 +366,7 @@ reference, same rules as engine `apiKey`), `dimension`, `localModel`,
 
 | Key | Purpose |
 | --- | --- |
-| `search.graphBoost.*` | Entity-graph relevance boost: `directBoostPerEntity`/`directBoostCap` (directly related entities), `hopBoostPerEntity`/`hopBoostCap` (multi-hop, capped at `maxHops` ≤ 3), `confidenceMode` (`off`\|`blend`\|`multiply`, default `blend`), `confidenceWeight` (0–1, default `0.2`) |
+| `search.graphBoost.*` | Entity-graph relevance boost: `directBoostPerEntity`/`directBoostCap` (directly related entities), `hopBoostPerEntity`/`hopBoostCap` (multi-hop, capped at `maxHops` ≤ 3), `confidenceMode` (`blend`, the only supported value), `confidenceWeight` (0–1, default `0.2`) |
 
 ## Feedback
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akm-cli",
-  "version": "0.9.5",
+  "version": "0.9.6",
   "type": "module",
   "description": "akm (Agent Knowledge Manager) — a portable, local-first capability library for AI agents. Discover, load, share, and improve reusable skills, scripts, workflows, and knowledge across any shell-capable coding agent, including Claude Code, OpenCode, and Cursor.",
   "keywords": [

package/schemas/akm-config.json

@@ -57,9 +57,6 @@
                 "type": "integer",
                 "exclusiveMinimum": 0
               },
-              "supportsJsonSchema": {
-                "type": "boolean"
-              },
               "extraParams": {
                 "type": "object",
                 "additionalProperties": {}
@@ -572,9 +569,7 @@
             "confidenceMode": {
               "type": "string",
               "enum": [
-                "off",
-                "blend",
-                "multiply"
+                "blend"
               ],
               "default": "blend"
             },
@@ -1747,9 +1742,6 @@
                     "type": "integer",
                     "exclusiveMinimum": 0
                   },
-                  "supportsJsonSchema": {
-                    "type": "boolean"
-                  },
                   "extraParams": {
                     "type": "object",
                     "additionalProperties": {}
@@ -2262,9 +2254,7 @@
                 "confidenceMode": {
                   "type": "string",
                   "enum": [
-                    "off",
-                    "blend",
-                    "multiply"
+                    "blend"
                   ],
                   "default": "blend"
                 },
@@ -3420,14 +3410,8 @@
           "type": "integer",
           "exclusiveMinimum": 0
         },
-        "capabilities": {
-          "type": "object",
-          "properties": {
-            "structuredOutput": {
-              "type": "boolean"
-            }
-          },
-          "additionalProperties": true
+        "supportsJsonSchema": {
+          "type": "boolean"
         },
         "extraParams": {
           "type": "object",
@@ -3443,9 +3427,6 @@
         "reasoningEffort": {
           "type": "string",
           "minLength": 1
-        },
-        "supportsJsonSchema": {
-          "type": "boolean"
         }
       },
       "required": [

package/schemas/akm-task.json

@@ -27,7 +27,6 @@
     },
     "inputs": {
       "type": "object",
-      "maxProperties": 128,
       "propertyNames": { "$ref": "#/definitions/taskInputName" },
       "additionalProperties": { "$ref": "#/definitions/inputDeclaration" }
     },
@@ -105,7 +104,7 @@
       "items": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }
     },
     "maxSteps": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
-    "maxRetries": { "type": "integer", "minimum": 0, "maximum": 100 }
+    "maxRetries": { "type": "integer", "minimum": 0 }
   },
   "oneOf": [
     {

package/schemas/akm-workflow.json

@@ -22,7 +22,6 @@
     "params": {
       "type": "object",
       "minProperties": 1,
-      "maxProperties": 128,
       "description": "Run parameters: param name -> JSON Schema declaration. Names must be params.<name>-addressable identifiers.",
       "propertyNames": {
         "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
@@ -34,7 +33,6 @@
     "outputs": {
       "type": "object",
       "minProperties": 1,
-      "maxProperties": 64,
       "description": "Named, optionally schema-validated projections of step artifacts, exported when the run completes. Names must be steps.<child>.output.<name>-addressable identifiers. Each entry: { from: steps.<id>.output(.<seg>)*, schema?: <bounded JSON Schema> }. Markdown-frontmatter only.",
       "propertyNames": {
         "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
@@ -52,7 +50,6 @@
     "steps": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 256,
       "items": {
         "$ref": "#/definitions/step"
       }
@@ -188,7 +185,6 @@
         "max": {
           "type": "integer",
           "minimum": 0,
-          "maximum": 100,
           "description": "Maximum retry attempts per unit."
         },
         "on": {
@@ -213,7 +209,6 @@
         "max_units": {
           "type": "integer",
           "minimum": 1,
-          "maximum": 10000,
           "description": "Ceiling on total dispatched units across the run (seeded from journaled unit rows)."
         }
       }
@@ -252,25 +247,21 @@
           "type": "array",
           "description": "argv; command[0] is the program, resolved through PATH. Never shell-parsed.",
           "minItems": 1,
-          "maxItems": 64,
           "items": {
             "type": "string",
-            "minLength": 1,
-            "maxLength": 4096
+            "minLength": 1
           }
         },
         "cwd": {
           "type": "string",
           "description": "Optional RELATIVE working directory inside the unit's working directory (its fresh worktree under `isolation: worktree`). Absolute paths, Windows drive letters, \"~\", and \"..\" segments are rejected here, and containment is re-checked against the resolved base — symlinks included — before the command is spawned.",
           "minLength": 1,
-          "maxLength": 1024,
           "pattern": "^(?!/|\\\\|~|[A-Za-z]:)(?!.*(?:^|[/\\\\])\\.\\.(?:[/\\\\]|$)).+$"
         },
         "pass_env": {
           "type": "array",
           "description": "Extra environment variable NAMES copied through from akm's own environment on top of the default allowlist — for a per-machine toolchain variable (e.g. CARGO_HOME) that no committed `env:` asset could carry. NAMES ONLY: values never appear in a workflow, and unlike `env:` bindings these values are NOT redacted from the command's output, so never list a credential here.",
           "minItems": 1,
-          "maxItems": 32,
           "uniqueItems": true,
           "items": {
             "type": "string",
@@ -398,7 +389,6 @@
         "when": {
           "type": "array",
           "minItems": 1,
-          "maxItems": 256,
           "items": {
             "$ref": "#/definitions/routeBranch"
           }
@@ -416,7 +406,6 @@
         "max_loops": {
           "type": "integer",
           "minimum": 1,
-          "maximum": 100,
           "description": "Evaluator-optimizer loop bound."
         }
       }
@@ -424,7 +413,6 @@
     "inputs": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 64,
       "uniqueItems": true,
       "items": {
         "$ref": "#/definitions/reference"