@kontextmind/kxm 0.6.0 → 0.7.0

package/docs/test-matrix.md

@@ -78,13 +78,14 @@ exercised from `node_modules`.
 | Non-blocking delegation | `examples/README.md` | Uses send, independent work, and get |
 | Obsolete-work cancellation | `examples/README.md` | Uses cancel and states rollback boundary |
 | Safe network retry | `examples/README.md` | Uses stable idempotency keys |
-| Jira issue-to-merge workflow | `.kxm/config/workflows/jira-development.json` | Parsed, type-checked through workflow tests, and exercised end to end with representative configuration |
+| Jira issue-to-merge workflow | `.kxm/workflows/default.yaml` | Parsed, type-checked through workflow tests, and exercised end to end with representative configuration |
 | `.kxm` workspace defaults and persisted hub/worker logs | `.kxm/`, `test/core/server.test.ts`, `test/core/worker.test.ts` | Executed with isolated temporary workspaces |
 | Signed external result callback | `examples/workflow-signal.ts` | Type-checked; equivalent signed callback path is exercised end to end in `test/core/hub-api.test.ts` |
-| Peer provenance and optional explicit degradation | `examples/provenance-workflow.json`, `.kxm/config/workflows/provenance-quorum.json`, `docs/provenance-gates.md` | Both definitions are parser-checked in `test/core/examples.test.ts`; adversarial evidence and degradation behavior is automated in `test/core/workflow-provenance.test.ts` |
+| Peer provenance and optional explicit degradation | `examples/provenance-workflow.json`, `.kxm/workflows/default.yaml`, `docs/provenance-gates.md` | Both definitions are parser-checked in `test/core/examples.test.ts`; adversarial evidence and degradation behavior is automated in `test/core/workflow-provenance.test.ts` |
 | Quorum parser boundaries and definition identity | `plugins/kxm/src/workflow.ts`, `test/core/workflow-quorum.test.ts`, `test/core/workflow-definition-hash.test.ts` | Rejects impossible peer pools, verifies degradation bounds, and proves secret-free semantic hash stamping plus credential-rotation invariance |
 | Artifact existence and containment gate | `plugins/kxm/src/artifacts-exist.ts`, `test/core/artifacts-exist.test.ts` | Non-empty regular files pass; missing, empty, non-file, lexical escape, and real-path escape cases fail closed (host-permitted symlink coverage) |
-| Headless harness helper | `scripts/harness-run.mjs`, `justfile`, `test/core/harness-run.test.ts` | Offline auth success/logout/garbage, role/mode/pair/provider refusals before spawn, missing brief/schema fail closed with zero spawn, invocation-cwd relative `prompt_file`/`output_schema` vs `request.cwd` (absolute argv tokens; Claude/Codex stdin matches the brief), Pi JSONL multi-`message_end` sums, Claude auxiliary usage, native error-on-exit-0, timeout/empty payload, sidecar-only stderr/answer/error, shell:false argv metacharacters, and win32 `.cmd` rejection. Result v2 transport vs closed model claims, dispatch-before-spawn, grok/codex isolation flags, `max_turns` validation, obsolete v1 diagnosis without rewrite or unknown-schema echo, partial usage on fail/interrupt, signaled null `exitCode` plus exact `signal`, exit-before-stdio-close drain vs bounded linger, type-closed usage/cost (no object leak or zero-coercion), malformed optional text as run-stage failure with retained spend, stdin/pid-record write failures not completed, bounded timeout settle without descendant-death claims, spawn/write-failure stage and spend, and capability-fixture parser evidence (Codex `--ignore-user-config` is not invented in top-level help; captured help bytes are not rescrubbed). Recipe quoting is covered from the justfile body without a just binary (POSIX `sh` + positional argv; Windows uses the recipe's `node -e` / argv shape). Real just integration is optional and skipped when the binary is absent. No live paid smoke. |
+| Harness inventory probe | `plugins/kxm/src/vnext-harness.ts`, `test/core/vnext-harness.test.ts` | Detect/auth/dispatch for the builtin catalog; win32 `.exe` / inner npm-package `.exe` / `.cmd` candidate order for npm shims (issue #168); `windows_shim` issue only when the shim answered; allowlisted `name.cmd` shell spawn only; rejected metacharacter commands; Linux still `not_detected` when the bare command is missing. |
+| Headless harness helper | `scripts/harness-run.mjs`, `justfile`, `test/core/harness-run.test.ts` | Offline auth success/logout/garbage, role/mode/pair/provider refusals before spawn, missing brief/schema fail closed with zero spawn, invocation-cwd relative `prompt_file`/`output_schema` vs `request.cwd` (absolute argv tokens; Claude/Codex stdin matches the brief), Pi JSONL multi-`message_end` sums, Claude auxiliary usage, native error-on-exit-0, timeout/empty payload, sidecar-only stderr/answer/error, shell:false argv metacharacters, win32 `.cmd` rejection, and win32 npm inner `claude.exe` / Pi `node.exe`+`cli.js` unwrap. Result v2 transport vs closed model claims, dispatch-before-spawn, grok/codex isolation flags, `max_turns` validation, obsolete v1 diagnosis without rewrite or unknown-schema echo, partial usage on fail/interrupt, signaled null `exitCode` plus exact `signal`, exit-before-stdio-close drain vs bounded linger, type-closed usage/cost (no object leak or zero-coercion), malformed optional text as run-stage failure with retained spend, stdin/pid-record write failures not completed, bounded timeout settle without descendant-death claims, spawn/write-failure stage and spend, and capability-fixture parser evidence (Codex `--ignore-user-config` is not invented in top-level help; captured help bytes are not rescrubbed). Recipe quoting is covered from the justfile body without a just binary (POSIX `sh` + positional argv; Windows uses the recipe's `node -e` / argv shape). Real just integration is optional and skipped when the binary is absent. No live paid smoke. |
 | Long-lived headless coordinator | `scripts/kxm-worker.mjs` | Restart limits, spawn failure, collision-resistant ownership, exact resource and tool loading, raw-output isolation, bounded RPC framing, bounded drain, hung-tool recovery, provider/model fallback, and `--continue` fallback are automated; the opt-in real-Pi gate verifies two workers, discovery, request/reply, fanout, durable restart/resume, journal, and checkpoint |
 | GitHub check signal adapter | `plugins/kxm/src/github-watch.ts` | Deterministic pagination, conclusion, retry, and per-wait delivery-generation states in `test/core/github-watch.test.ts` |
 | Operator CLI | `scripts/kxm.mjs` | Isolated workspace commands in `test/core/cli.test.ts`; the packed artifact is installed locally and with the documented global `--omit=peer` path by `test/core/package-install.test.ts` |

package/docs/troubleshooting.md

@@ -52,6 +52,25 @@ Do not delete or rewrite the database. Start the package version that created it
 
 Another process owns the port. Stop that process or choose another port, then update every agent's `KXM_SERVER_URL`.
 
+### `kxm harness list` says Claude Code is `not_detected` on Windows
+
+npm installs Claude Code as `claude.cmd` (and an extensionless shim), not
+`claude.exe` on `PATH`. The native binary lives next to the shim at
+`%AppData%\Roaming\npm\node_modules\@anthropic-ai\claude-code\bin\claude.exe`.
+Older probes spawned `claude` without a shell, got `ENOENT` or `EINVAL`, and
+reported the CLI missing even when `claude --version` worked in cmd or Git Bash.
+
+Current `kxm harness list` retries `claude.exe`, then that inner package
+`.exe`, then `claude.cmd` on win32. It sets `issues: ["windows_shim"]` only
+when the npm shim is what answered. If the entry is still `not_detected`,
+confirm `%AppData%\Roaming\npm` is on `PATH` for the same process that runs
+`kxm`, then `claude --version` and `claude auth status`. Assignment dispatch
+(`just assign` / `harness-run`) follows the inner `claude.exe` (and Pi's
+`node.exe` plus `cli.js`) with `shell: false`; unverified `.cmd` launchers
+are still refused.
+
+The same npm-shim miss can appear for `pi` on Windows.
+
 ### Pi shows `hub:off`
 
 - Confirm the hub is reachable from the Pi terminal.

package/docs/vnext/validation.md

@@ -22,6 +22,15 @@ The `schema` field is required. For agent, model, and workflow files, identity i
 the normalized filename without `.yaml`; an in-document identity field is
 forbidden.
 
+The shared implementation is `plugins/kxm/src/restricted-yaml.mjs`. Public
+`vnext-config` callers still receive `VnextConfigError` issue codes, paths, and
+messages.
+
+`schemas/policy-draft` (`kxm.model.v2`, `kxm.role.v2`) and
+`validatePolicyDraft` are non-authoritative scaffolding. They are not live
+registry identities, operator settings, or admission. Live model files remain
+`kxm.model.v1` under `schemas/vnext`.
+
 ## Validation pipeline
 
 ### 1. Parse validation

package/docs/webhook-workflows.md

@@ -21,7 +21,7 @@ The hub stores a SHA-256 payload hash and the rendered coordinator prompt, not t
 
 ## Configure the Jira example
 
-The included [`jira-development.json`](../.kxm/config/workflows/jira-development.json) workspace configuration models this path:
+The included [`jira-development.json`](../.kxm/workflows/default.yaml) workspace configuration models this path:
 
 1. Jira issue enters **In Progress**.
 2. Reproduce the defect and create deterministic evidence.
@@ -41,7 +41,7 @@ Load it without storing its secret in the JSON file:
 ```powershell
 $env:JIRA_WEBHOOK_SECRET = "replace-with-a-high-entropy-secret"
 $env:WORKFLOW_SIGNAL_SECRET = "replace-with-a-separate-callback-secret"
-$env:KXM_WEBHOOK_WORKFLOWS_FILE = ".kxm/config/workflows/jira-development.json"
+$env:KXM_WEBHOOK_WORKFLOWS_FILE = ".kxm/workflows/default.yaml"
 kxm hub start
 ```
 

package/examples/README.md

@@ -2,7 +2,7 @@
 
 These examples demonstrate the transport without requiring an AI model. Run them from the repository root after `npm ci`.
 
-The [`.kxm/config/workflows/jira-development.json`](../.kxm/config/workflows/jira-development.json) workspace configuration is a production-oriented definition for a long-lived coordinator. It covers reproduction, single-agent or three-agent planning, plan review, implementation, local and repository gates, documentation, push/watch retries, merge, Jira update, and continuous improvement. Follow [Webhook workflows](../docs/webhook-workflows.md) to configure it.
+The [`.kxm/workflows/default.yaml`](../.kxm/workflows/default.yaml) workspace configuration is a production-oriented definition for a long-lived coordinator. It covers reproduction, single-agent or three-agent planning, plan review, implementation, local and repository gates, documentation, push/watch retries, merge, Jira update, and continuous improvement. Follow [Webhook workflows](../docs/webhook-workflows.md) to configure it.
 
 The [`workflow-signal.ts`](workflow-signal.ts) sender demonstrates the signed callback that resumes a coordinator after CI, review, merge, or Jira work completes. The webhook guide documents its required environment and arguments.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",
@@ -38,8 +38,8 @@
     "test:simulations": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 test/simulations/*.test.ts",
     "test:complete": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 test/core/*.test.ts test/simulations/*.test.ts",
     "test": "npm run test:core",
-    "test:coverage:core": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 --experimental-test-coverage --test-coverage-lines=92 --test-coverage-branches=80 --test-coverage-functions=93 --test-coverage-include=plugins/kxm/src/**/*.ts --test-coverage-exclude=plugins/kxm/src/server.ts --test-coverage-exclude=plugins/kxm/src/mcp-server.ts test/core/*.test.ts",
-    "test:coverage:complete": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 --experimental-test-coverage --test-coverage-lines=93 --test-coverage-branches=80 --test-coverage-functions=93 --test-coverage-include=plugins/kxm/src/**/*.ts --test-coverage-exclude=plugins/kxm/src/server.ts --test-coverage-exclude=plugins/kxm/src/mcp-server.ts test/core/*.test.ts test/simulations/*.test.ts",
+    "test:coverage:core": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 --experimental-test-coverage --test-coverage-lines=91 --test-coverage-branches=80 --test-coverage-functions=92 --test-coverage-include=plugins/kxm/src/**/*.ts --test-coverage-exclude=plugins/kxm/src/server.ts --test-coverage-exclude=plugins/kxm/src/mcp-server.ts --test-coverage-exclude=plugins/kxm/src/vnext-runtime-supervisor.ts test/core/*.test.ts",
+    "test:coverage:complete": "npm run build && node --disable-warning=ExperimentalWarning --experimental-strip-types --test --test-concurrency=4 --experimental-test-coverage --test-coverage-lines=93 --test-coverage-branches=80 --test-coverage-functions=93 --test-coverage-include=plugins/kxm/src/**/*.ts --test-coverage-exclude=plugins/kxm/src/server.ts --test-coverage-exclude=plugins/kxm/src/mcp-server.ts --test-coverage-exclude=plugins/kxm/src/vnext-runtime-supervisor.ts test/core/*.test.ts test/simulations/*.test.ts",
     "test:coverage": "npm run test:coverage:core",
     "typecheck": "tsc --noEmit",
     "lint:docs": "markdownlint-cli2",
@@ -82,29 +82,27 @@
     }
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "0.84.3",
+    "@earendil-works/pi-coding-agent": "0.85.1",
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@types/node": "26.4.0",
+    "@types/node": "26.4.1",
     "ajv": "8.20.0",
     "commander": "15.0.0",
     "esbuild": "0.28.2",
     "markdownlint-cli2": "0.23.2",
-    "typebox": "1.3.19",
-    "typescript": "7.0.2",
-    "yaml": "2.9.0"
+    "tsx": "^4.23.13",
+    "typebox": "1.3.28",
+    "typescript": "7.0.2"
   },
   "files": [
     ".kxm/README.md",
     ".kxm/assets/README.md",
     ".kxm/assets/retrospectives/README.md",
-    ".kxm/config/README.md",
-    ".kxm/config/env.example",
-    ".kxm/config/update.example.yaml",
-    ".kxm/config/agents.json",
-    ".kxm/config/workflows/jira-development.json",
-    ".kxm/config/workflows/v04-dogfood.json",
-    ".kxm/config/workflows/fix.json",
-    ".kxm/config/workflows/provenance-quorum.json",
+    ".kxm/project.yaml",
+    ".kxm/gates.yaml",
+    ".kxm/producers.yaml",
+    ".kxm/agents/*.yaml",
+    ".kxm/roles/*.yaml",
+    ".kxm/workflows/*.yaml",
     ".claude-plugin",
     "plugins/kxm/.claude-plugin",
     "plugins/kxm/.mcp.json",
@@ -124,6 +122,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@earendil-works/pi-tui": "0.84.4"
+    "@earendil-works/pi-tui": "0.85.1",
+    "yaml": "^2.9.0"
   }
 }

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/README.md

@@ -39,7 +39,7 @@ Configure the hub URL, token, unique agent name, purpose, and project when promp
 | `kxm_workflow_record` | Capture a plan, decision, contradiction, error, or lesson |
 | `kxm_improvement_report` | Group learning evidence by improvement area |
 
-The bundled `kxm` skill teaches Claude when and how to use these tools safely.
+The bundled `kxm` skill teaches Claude when and how to use these tools safely. For the complete KXM Agent Skills suite covering all KXM commands, see the [Agent Skills documentation](../../docs/agent-skills.md).
 
 Signed webhooks can create durable workflows for long-lived Pi coordinators. See the repository's [Webhook workflows](../../docs/webhook-workflows.md) guide and Jira development example.