@kontextmind/kxm 0.7.12 → 0.7.14

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.12",
+      "version": "0.7.14",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.12",
+  "version": "0.7.14",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.12",
+  "version": "0.7.14",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -24813,6 +24813,18 @@ function loadPriceCatalog(rootOrPath) {
   const content = readFileSync7(candidatePath, "utf8");
   return parsePriceCatalog(content);
 }
+function loadPriceCatalogForEstimate(options) {
+  let catalog;
+  try {
+    catalog = options?.priceCatalog ? parsePriceCatalog(JSON.stringify(options.priceCatalog)) : loadPriceCatalog(options?.projectRoot ?? process.cwd());
+  } catch {
+    return { catalog: void 0, unavailable: true, stale: false };
+  }
+  if (catalog && catalog.date !== (/* @__PURE__ */ new Date()).toISOString().slice(0, 10)) {
+    return { catalog: void 0, unavailable: false, stale: true };
+  }
+  return { catalog, unavailable: false, stale: false };
+}
 
 // plugins/kxm/src/vnext-engine.ts
 var import_yaml5 = __toESM(require_dist(), 1);
@@ -46205,6 +46217,41 @@ function resolveActiveMode(config, majorModeName = "coder", domainNames = []) {
     model: major.model || "grok/grok-4.6"
   };
 }
+var CATALOG_DATE_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
+function boundedCatalogDate(value) {
+  return typeof value === "string" && CATALOG_DATE_RE.test(value) ? value : void 0;
+}
+function catalogDateForStatus(loaded, injected, projectRoot) {
+  const fromLoaded = boundedCatalogDate(loaded.catalog?.date);
+  if (fromLoaded) return fromLoaded;
+  const fromInjected = boundedCatalogDate(injected?.date);
+  if (fromInjected) return fromInjected;
+  if (!loaded.stale) return void 0;
+  try {
+    return boundedCatalogDate(loadPriceCatalog(projectRoot)?.date);
+  } catch {
+    return void 0;
+  }
+}
+function describePriceCatalogStatus(loaded, catalogDate) {
+  if (loaded.stale) {
+    return {
+      catalogStatus: "stale",
+      catalogReason: catalogDate ? `price catalog stale (dated ${catalogDate})` : "price catalog stale"
+    };
+  }
+  if (loaded.unavailable) {
+    return { catalogStatus: "corrupt", catalogReason: "price catalog corrupt" };
+  }
+  if (!loaded.catalog) {
+    return { catalogStatus: "missing", catalogReason: "price catalog missing" };
+  }
+  return { catalogStatus: "verified", catalogReason: "price catalog verified" };
+}
+function formatExplainCost(value, footprint, suffix = "") {
+  if (value !== null) return `$${value.toFixed(4)}${suffix}`;
+  return footprint.catalogStatus === "verified" ? "unmetered/unknown" : footprint.catalogReason;
+}
 function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog) {
   const breakdown = [];
   const baseSystemPromptChars = 3200;
@@ -46250,7 +46297,14 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
   const totalTokens = breakdown.reduce((sum, item) => sum + item.estimatedTokens, 0);
   const maxContextWindow = 2e5;
   const contextWindowRatio = Math.round(totalTokens / maxContextWindow * 1e3) / 10;
-  const cat = catalog || loadPriceCatalog(projectRoot);
+  const loaded = loadPriceCatalogForEstimate(
+    catalog ? { priceCatalog: catalog } : { projectRoot }
+  );
+  const catalogInfo = describePriceCatalogStatus(
+    loaded,
+    catalogDateForStatus(loaded, catalog, projectRoot)
+  );
+  const cat = loaded.catalog;
   const rawModel = resolved.model || "grok/grok-4.6";
   const [prov, mod] = rawModel.includes("/") ? rawModel.split("/", 2) : [void 0, rawModel];
   const inputCost = cat ? calculateModelCost(cat, {
@@ -46289,7 +46343,9 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
       inputCostUsd: inputCost?.costUsd ?? null,
       cacheReadCostUsd: cacheReadCost?.costUsd ?? null,
       outputCostEstimateUsd: outputEstimateCost?.costUsd ?? null
-    }
+    },
+    catalogStatus: catalogInfo.catalogStatus,
+    catalogReason: catalogInfo.catalogReason
   };
 }
 function formatModesExplainReport(footprint) {
@@ -46307,6 +46363,8 @@ ${divider}
   out += `Enabled Domains:  ${footprint.enabledDomains.length > 0 ? footprint.enabledDomains.join(", ") : "(none)"}
 `;
   out += `Target Model:     ${footprint.model}
+`;
+  out += `Catalog status:   ${footprint.catalogReason}
 
 `;
   out += `CONTEXT BREAKDOWN:
@@ -46326,11 +46384,11 @@ ${divider}
 `;
   out += `PROJECTED COSTS (per turn):
 `;
-  out += `  \u2022 Initial Turn Input Cost:   ${footprint.projectedCost.inputCostUsd !== null ? `$${footprint.projectedCost.inputCostUsd.toFixed(4)}` : "unmetered/unknown"}
+  out += `  \u2022 Initial Turn Input Cost:   ${formatExplainCost(footprint.projectedCost.inputCostUsd, footprint)}
 `;
-  out += `  \u2022 Subsequent Cache-Read Cost: ${footprint.projectedCost.cacheReadCostUsd !== null ? `$${footprint.projectedCost.cacheReadCostUsd.toFixed(4)} (approx 90% savings)` : "unmetered/unknown"}
+  out += `  \u2022 Subsequent Cache-Read Cost: ${formatExplainCost(footprint.projectedCost.cacheReadCostUsd, footprint, " (approx 90% savings)")}
 `;
-  out += `  \u2022 Output Estimate (1k tokens): ${footprint.projectedCost.outputCostEstimateUsd !== null ? `$${footprint.projectedCost.outputCostEstimateUsd.toFixed(4)}` : "unmetered/unknown"}
+  out += `  \u2022 Output Estimate (1k tokens): ${formatExplainCost(footprint.projectedCost.outputCostEstimateUsd, footprint)}
 `;
   out += `${divider}
 `;

package/plugins/kxm/dist/mcp-server.js

@@ -17036,7 +17036,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.12";
+var VERSION = "0.7.14";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/dist/runtime.js

@@ -22674,6 +22674,18 @@ function loadPriceCatalog(rootOrPath) {
   const content = readFileSync5(candidatePath, "utf8");
   return parsePriceCatalog(content);
 }
+function loadPriceCatalogForEstimate(options) {
+  let catalog;
+  try {
+    catalog = options?.priceCatalog ? parsePriceCatalog(JSON.stringify(options.priceCatalog)) : loadPriceCatalog(options?.projectRoot ?? process.cwd());
+  } catch {
+    return { catalog: void 0, unavailable: true, stale: false };
+  }
+  if (catalog && catalog.date !== (/* @__PURE__ */ new Date()).toISOString().slice(0, 10)) {
+    return { catalog: void 0, unavailable: false, stale: true };
+  }
+  return { catalog, unavailable: false, stale: false };
+}
 
 // plugins/kxm/src/vnext-engine.ts
 var import_yaml5 = __toESM(require_dist(), 1);
@@ -27286,10 +27298,16 @@ function createVnextPiProducer(options = {}) {
       const cacheReadTokens = typeof usage?.cacheRead === "number" ? usage.cacheRead : null;
       const cacheWriteTokens = typeof usage?.cacheWrite === "number" ? usage.cacheWrite : null;
       const contextTokens = typeof usage?.contextUsage?.tokens === "number" ? usage.contextUsage.tokens : tokensIn;
-      const catalog = options.priceCatalog ?? loadPriceCatalog(options.projectRoot ?? process.cwd());
-      let costBasis = "unknown";
-      let costUsd = null;
-      let priceRef;
+      const providerMetadata = {};
+      const loaded = loadPriceCatalogForEstimate({
+        priceCatalog: options.priceCatalog,
+        projectRoot: options.projectRoot
+      });
+      if (loaded.unavailable) providerMetadata.priceCatalogUnavailable = true;
+      if (loaded.stale) providerMetadata.priceCatalogStale = true;
+      const catalog = loaded.catalog;
+      const costBasis = "unknown";
+      const costUsd = null;
       if (catalog) {
         const calculated = calculateModelCost(catalog, {
           model: resolved.model,
@@ -27300,10 +27318,10 @@ function createVnextPiProducer(options = {}) {
           cacheWriteTokens,
           contextTokens
         });
-        if (calculated) {
-          costBasis = "metered";
-          costUsd = calculated.costUsd;
-          priceRef = calculated.priceRef;
+        if (calculated && Number.isFinite(calculated.costUsd)) {
+          providerMetadata.listCostUsd = calculated.costUsd;
+          providerMetadata.listPriceRef = calculated.priceRef;
+          providerMetadata.listPriceSha256 = catalog.sha256;
         }
       }
       return {
@@ -27320,9 +27338,9 @@ function createVnextPiProducer(options = {}) {
         provider: resolved.provider,
         requestedModel: resolved.model,
         effectiveModel: resolved.model,
+        providerMetadata,
         ...resolved.thinking !== void 0 ? { thinking: resolved.thinking } : {},
-        agentRole: request.agentRole ?? request.agentId,
-        ...priceRef !== void 0 ? { priceRef } : {}
+        agentRole: request.agentRole ?? request.agentId
       };
     },
     async closeRun(runId) {
@@ -28371,6 +28389,41 @@ function resolveActiveMode(config, majorModeName = "coder", domainNames = []) {
     model: major.model || "grok/grok-4.6"
   };
 }
+var CATALOG_DATE_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
+function boundedCatalogDate(value) {
+  return typeof value === "string" && CATALOG_DATE_RE.test(value) ? value : void 0;
+}
+function catalogDateForStatus(loaded, injected, projectRoot) {
+  const fromLoaded = boundedCatalogDate(loaded.catalog?.date);
+  if (fromLoaded) return fromLoaded;
+  const fromInjected = boundedCatalogDate(injected?.date);
+  if (fromInjected) return fromInjected;
+  if (!loaded.stale) return void 0;
+  try {
+    return boundedCatalogDate(loadPriceCatalog(projectRoot)?.date);
+  } catch {
+    return void 0;
+  }
+}
+function describePriceCatalogStatus(loaded, catalogDate) {
+  if (loaded.stale) {
+    return {
+      catalogStatus: "stale",
+      catalogReason: catalogDate ? `price catalog stale (dated ${catalogDate})` : "price catalog stale"
+    };
+  }
+  if (loaded.unavailable) {
+    return { catalogStatus: "corrupt", catalogReason: "price catalog corrupt" };
+  }
+  if (!loaded.catalog) {
+    return { catalogStatus: "missing", catalogReason: "price catalog missing" };
+  }
+  return { catalogStatus: "verified", catalogReason: "price catalog verified" };
+}
+function formatExplainCost(value, footprint, suffix = "") {
+  if (value !== null) return `$${value.toFixed(4)}${suffix}`;
+  return footprint.catalogStatus === "verified" ? "unmetered/unknown" : footprint.catalogReason;
+}
 function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog) {
   const breakdown = [];
   const baseSystemPromptChars = 3200;
@@ -28416,7 +28469,14 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
   const totalTokens = breakdown.reduce((sum, item) => sum + item.estimatedTokens, 0);
   const maxContextWindow = 2e5;
   const contextWindowRatio = Math.round(totalTokens / maxContextWindow * 1e3) / 10;
-  const cat = catalog || loadPriceCatalog(projectRoot);
+  const loaded = loadPriceCatalogForEstimate(
+    catalog ? { priceCatalog: catalog } : { projectRoot }
+  );
+  const catalogInfo = describePriceCatalogStatus(
+    loaded,
+    catalogDateForStatus(loaded, catalog, projectRoot)
+  );
+  const cat = loaded.catalog;
   const rawModel = resolved.model || "grok/grok-4.6";
   const [prov, mod] = rawModel.includes("/") ? rawModel.split("/", 2) : [void 0, rawModel];
   const inputCost = cat ? calculateModelCost(cat, {
@@ -28455,7 +28515,9 @@ function calculatePromptFootprint(resolved, projectRoot = process.cwd(), catalog
       inputCostUsd: inputCost?.costUsd ?? null,
       cacheReadCostUsd: cacheReadCost?.costUsd ?? null,
       outputCostEstimateUsd: outputEstimateCost?.costUsd ?? null
-    }
+    },
+    catalogStatus: catalogInfo.catalogStatus,
+    catalogReason: catalogInfo.catalogReason
   };
 }
 function formatModesExplainReport(footprint) {
@@ -28473,6 +28535,8 @@ ${divider}
   out += `Enabled Domains:  ${footprint.enabledDomains.length > 0 ? footprint.enabledDomains.join(", ") : "(none)"}
 `;
   out += `Target Model:     ${footprint.model}
+`;
+  out += `Catalog status:   ${footprint.catalogReason}
 
 `;
   out += `CONTEXT BREAKDOWN:
@@ -28492,11 +28556,11 @@ ${divider}
 `;
   out += `PROJECTED COSTS (per turn):
 `;
-  out += `  \u2022 Initial Turn Input Cost:   ${footprint.projectedCost.inputCostUsd !== null ? `$${footprint.projectedCost.inputCostUsd.toFixed(4)}` : "unmetered/unknown"}
+  out += `  \u2022 Initial Turn Input Cost:   ${formatExplainCost(footprint.projectedCost.inputCostUsd, footprint)}
 `;
-  out += `  \u2022 Subsequent Cache-Read Cost: ${footprint.projectedCost.cacheReadCostUsd !== null ? `$${footprint.projectedCost.cacheReadCostUsd.toFixed(4)} (approx 90% savings)` : "unmetered/unknown"}
+  out += `  \u2022 Subsequent Cache-Read Cost: ${formatExplainCost(footprint.projectedCost.cacheReadCostUsd, footprint, " (approx 90% savings)")}
 `;
-  out += `  \u2022 Output Estimate (1k tokens): ${footprint.projectedCost.outputCostEstimateUsd !== null ? `$${footprint.projectedCost.outputCostEstimateUsd.toFixed(4)}` : "unmetered/unknown"}
+  out += `  \u2022 Output Estimate (1k tokens): ${formatExplainCost(footprint.projectedCost.outputCostEstimateUsd, footprint)}
 `;
   out += `${divider}
 `;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kxm-claude-plugin",
-  "version": "0.7.12",
+  "version": "0.7.14",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/mcp-server.ts

@@ -7,7 +7,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.12";
+const VERSION = "0.7.14";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/plugins/kxm/src/modes.ts

@@ -8,7 +8,15 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { parse } from "yaml";
-import { calculateModelCost, type PriceCatalog, loadPriceCatalog } from "./prices.ts";
+import {
+  calculateModelCost,
+  loadPriceCatalog,
+  loadPriceCatalogForEstimate,
+  type PriceCatalog,
+  type PriceCatalogEstimateSource,
+} from "./prices.ts";
+
+export type PriceCatalogStatus = "verified" | "stale" | "corrupt" | "missing";
 
 export interface MajorMode {
   description?: string | undefined;
@@ -60,6 +68,8 @@ export interface PromptFootprint {
     cacheReadCostUsd: number | null;
     outputCostEstimateUsd: number | null;
   };
+  catalogStatus: PriceCatalogStatus;
+  catalogReason: string;
 }
 
 export const DEFAULT_MODES_CONFIG: ModesConfig = Object.freeze({
@@ -195,6 +205,59 @@ export function resolveActiveMode(
   };
 }
 
+const CATALOG_DATE_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
+
+function boundedCatalogDate(value: unknown): string | undefined {
+  return typeof value === "string" && CATALOG_DATE_RE.test(value) ? value : undefined;
+}
+
+function catalogDateForStatus(
+  loaded: PriceCatalogEstimateSource,
+  injected: PriceCatalog | undefined,
+  projectRoot: string,
+): string | undefined {
+  const fromLoaded = boundedCatalogDate(loaded.catalog?.date);
+  if (fromLoaded) return fromLoaded;
+  const fromInjected = boundedCatalogDate(injected?.date);
+  if (fromInjected) return fromInjected;
+  if (!loaded.stale) return undefined;
+  try {
+    return boundedCatalogDate(loadPriceCatalog(projectRoot)?.date);
+  } catch {
+    return undefined;
+  }
+}
+
+function describePriceCatalogStatus(
+  loaded: PriceCatalogEstimateSource,
+  catalogDate?: string,
+): { catalogStatus: PriceCatalogStatus; catalogReason: string } {
+  if (loaded.stale) {
+    return {
+      catalogStatus: "stale",
+      catalogReason: catalogDate
+        ? `price catalog stale (dated ${catalogDate})`
+        : "price catalog stale",
+    };
+  }
+  if (loaded.unavailable) {
+    return { catalogStatus: "corrupt", catalogReason: "price catalog corrupt" };
+  }
+  if (!loaded.catalog) {
+    return { catalogStatus: "missing", catalogReason: "price catalog missing" };
+  }
+  return { catalogStatus: "verified", catalogReason: "price catalog verified" };
+}
+
+function formatExplainCost(
+  value: number | null,
+  footprint: PromptFootprint,
+  suffix = "",
+): string {
+  if (value !== null) return `$${value.toFixed(4)}${suffix}`;
+  return footprint.catalogStatus === "verified" ? "unmetered/unknown" : footprint.catalogReason;
+}
+
 /**
  * Calculate the exact prompt token footprint and projected costs for a mode configuration.
  */
@@ -258,8 +321,15 @@ export function calculatePromptFootprint(
   const maxContextWindow = 200000;
   const contextWindowRatio = Math.round((totalTokens / maxContextWindow) * 1000) / 10;
 
-  // 5. Projected Costs
-  const cat = catalog || loadPriceCatalog(projectRoot);
+  // 5. Projected Costs — unverified or stale catalogs stay unknown.
+  const loaded = loadPriceCatalogForEstimate(
+    catalog ? { priceCatalog: catalog } : { projectRoot },
+  );
+  const catalogInfo = describePriceCatalogStatus(
+    loaded,
+    catalogDateForStatus(loaded, catalog, projectRoot),
+  );
+  const cat = loaded.catalog;
   const rawModel = resolved.model || "grok/grok-4.6";
   const [prov, mod] = rawModel.includes("/") ? rawModel.split("/", 2) : [undefined, rawModel];
 
@@ -309,6 +379,8 @@ export function calculatePromptFootprint(
       cacheReadCostUsd: cacheReadCost?.costUsd ?? null,
       outputCostEstimateUsd: outputEstimateCost?.costUsd ?? null,
     },
+    catalogStatus: catalogInfo.catalogStatus,
+    catalogReason: catalogInfo.catalogReason,
   };
 }
 
@@ -324,7 +396,8 @@ export function formatModesExplainReport(footprint: PromptFootprint): string {
   out += `${divider}\n`;
   out += `Major Mode:       ${footprint.majorMode}\n`;
   out += `Enabled Domains:  ${footprint.enabledDomains.length > 0 ? footprint.enabledDomains.join(", ") : "(none)"}\n`;
-  out += `Target Model:     ${footprint.model}\n\n`;
+  out += `Target Model:     ${footprint.model}\n`;
+  out += `Catalog status:   ${footprint.catalogReason}\n\n`;
 
   out += `CONTEXT BREAKDOWN:\n`;
   for (const item of footprint.breakdown) {
@@ -339,9 +412,9 @@ export function formatModesExplainReport(footprint: PromptFootprint): string {
   out += `  ${totalPad} ${totalStr} (${footprint.contextWindowRatio}% of 200k window)\n\n`;
 
   out += `PROJECTED COSTS (per turn):\n`;
-  out += `  • Initial Turn Input Cost:   ${footprint.projectedCost.inputCostUsd !== null ? `$${footprint.projectedCost.inputCostUsd.toFixed(4)}` : "unmetered/unknown"}\n`;
-  out += `  • Subsequent Cache-Read Cost: ${footprint.projectedCost.cacheReadCostUsd !== null ? `$${footprint.projectedCost.cacheReadCostUsd.toFixed(4)} (approx 90% savings)` : "unmetered/unknown"}\n`;
-  out += `  • Output Estimate (1k tokens): ${footprint.projectedCost.outputCostEstimateUsd !== null ? `$${footprint.projectedCost.outputCostEstimateUsd.toFixed(4)}` : "unmetered/unknown"}\n`;
+  out += `  • Initial Turn Input Cost:   ${formatExplainCost(footprint.projectedCost.inputCostUsd, footprint)}\n`;
+  out += `  • Subsequent Cache-Read Cost: ${formatExplainCost(footprint.projectedCost.cacheReadCostUsd, footprint, " (approx 90% savings)")}\n`;
+  out += `  • Output Estimate (1k tokens): ${formatExplainCost(footprint.projectedCost.outputCostEstimateUsd, footprint)}\n`;
   out += `${divider}\n`;
 
   return out;

package/plugins/kxm/src/policy-draft.d.mts

@@ -31,6 +31,7 @@ export interface PolicyDraftOptions {
   readonly ceilings: Readonly<Record<string, PolicyDraftCeiling>>;
   readonly nativePiBrakeProviders: readonly string[];
   readonly piAllowedProviders: readonly string[];
+  readonly piNativeVendorProviders?: Readonly<Record<string, string>>;
   readonly vendorAliases?: Readonly<Record<string, string>>;
 }
 

package/plugins/kxm/src/policy-draft.mjs

@@ -408,8 +408,23 @@ function validateModelSemantics(model, label, options, evidence, issues) {
   }
   if (model.harness === "pi") {
     const parts = typeof model.model === "string" ? model.model.split("/") : [];
-    if (parts.length < 3 || parts.some((part) => !part) || !options.piAllowedProviders.includes(parts[0])) {
+    const nativeVendors = isObject(options.piNativeVendorProviders) ? options.piNativeVendorProviders : {};
+    const provider = parts[0];
+    const owned = own(nativeVendors, provider) ? canonicalVendor(nativeVendors[provider], aliases) : "";
+    const minParts = owned ? 2 : 3;
+    const maxParts = owned ? 2 : Number.POSITIVE_INFINITY;
+    if (
+      parts.length < minParts
+      || parts.length > maxParts
+      || parts.some((part) => !part)
+      || !options.piAllowedProviders.includes(provider)
+      || (owned && !/^gemini-[a-z0-9.-]+$/.test(parts[1]))
+    ) {
       issues.push(issue("semantic", "unsupported_pi_model", label, "Pi model must use an allowlisted aggregator prefix"));
+    } else if (owned) {
+      if (owned !== vendor) {
+        issues.push(issue("semantic", "pi_native_vendor_forbidden", label, "native vendor cannot use Pi"));
+      }
     } else {
       const prefix = canonicalVendor(parts[1], aliases);
       if (options.nativePiBrakeProviders.includes(prefix) || options.nativePiBrakeProviders.includes(vendor)) {

package/plugins/kxm/src/prices.ts

@@ -135,3 +135,35 @@ export function loadPriceCatalog(rootOrPath: string): PriceCatalog | undefined {
   return parsePriceCatalog(content);
 }
 
+/** Result of a hash-verified, freshness-gated catalog load used for list estimates. */
+export interface PriceCatalogEstimateSource {
+  readonly catalog: PriceCatalog | undefined;
+  readonly unavailable: boolean;
+  readonly stale: boolean;
+}
+
+/**
+ * Load a price catalog the way one-shot settlement does: re-parse injected
+ * catalogs so the digest is checked, treat missing files as unknown, and drop
+ * any snapshot whose date is not today. Callers must not throw after spend.
+ */
+export function loadPriceCatalogForEstimate(options?: {
+  priceCatalog?: PriceCatalog | undefined;
+  projectRoot?: string | undefined;
+}): PriceCatalogEstimateSource {
+  let catalog: PriceCatalog | undefined;
+  try {
+    catalog = options?.priceCatalog
+      ? parsePriceCatalog(JSON.stringify(options.priceCatalog))
+      : loadPriceCatalog(options?.projectRoot ?? process.cwd());
+  } catch {
+    return { catalog: undefined, unavailable: true, stale: false };
+  }
+  // Without a freshness-aware vendor feed, don't silently quote an older
+  // local snapshot. Even today's hash-verified snapshot is only an estimate.
+  if (catalog && catalog.date !== new Date().toISOString().slice(0, 10)) {
+    return { catalog: undefined, unavailable: false, stale: true };
+  }
+  return { catalog, unavailable: false, stale: false };
+}
+

package/plugins/kxm/src/vnext-pi-producer.ts

@@ -15,7 +15,7 @@ import {
 } from "./vnext-harness.ts";
 import {
   calculateModelCost,
-  loadPriceCatalog,
+  loadPriceCatalogForEstimate,
   type PriceCatalog,
 } from "./prices.ts";
 
@@ -566,12 +566,17 @@ export function createVnextPiProducer(options: VnextPiProducerOptions = {}): Vne
       const cacheWriteTokens = typeof usage?.cacheWrite === "number" ? usage.cacheWrite : null;
       const contextTokens = typeof usage?.contextUsage?.tokens === "number" ? usage.contextUsage.tokens : tokensIn;
 
-      // Price calculation
-      const catalog = options.priceCatalog ?? loadPriceCatalog(options.projectRoot ?? process.cwd());
-      let costBasis: "metered" | "unknown" = "unknown";
-      let costUsd: number | null = null;
-      let priceRef: string | undefined;
-
+      // Catalog errors must not discard observed usage or crash settlement.
+      const providerMetadata: Record<string, string | number | boolean> = {};
+      const loaded = loadPriceCatalogForEstimate({
+        priceCatalog: options.priceCatalog,
+        projectRoot: options.projectRoot,
+      });
+      if (loaded.unavailable) providerMetadata.priceCatalogUnavailable = true;
+      if (loaded.stale) providerMetadata.priceCatalogStale = true;
+      const catalog = loaded.catalog;
+      const costBasis = "unknown" as const;
+      const costUsd = null;
       if (catalog) {
         const calculated = calculateModelCost(catalog, {
           model: resolved.model,
@@ -582,10 +587,10 @@ export function createVnextPiProducer(options: VnextPiProducerOptions = {}): Vne
           cacheWriteTokens,
           contextTokens,
         });
-        if (calculated) {
-          costBasis = "metered";
-          costUsd = calculated.costUsd;
-          priceRef = calculated.priceRef;
+        if (calculated && Number.isFinite(calculated.costUsd)) {
+          providerMetadata.listCostUsd = calculated.costUsd;
+          providerMetadata.listPriceRef = calculated.priceRef;
+          providerMetadata.listPriceSha256 = catalog.sha256;
         }
       }
 
@@ -603,9 +608,9 @@ export function createVnextPiProducer(options: VnextPiProducerOptions = {}): Vne
         provider: resolved.provider,
         requestedModel: resolved.model,
         effectiveModel: resolved.model,
+        providerMetadata,
         ...(resolved.thinking !== undefined ? { thinking: resolved.thinking } : {}),
         agentRole: request.agentRole ?? request.agentId,
-        ...(priceRef !== undefined ? { priceRef } : {}),
       };
     },
 

package/scripts/harness-run.d.mts

@@ -16,6 +16,8 @@ export const ERROR_CODES: readonly string[];
 export const EFFORT: readonly string[];
 export const NATIVE_PI_BRAKE_PROVIDERS: readonly string[];
 export const PI_ALLOWED_PROVIDERS: readonly string[];
+export const PI_NATIVE_VENDOR_PROVIDERS: Readonly<Record<string, string>>;
+export const PI_ANTIGRAVITY_MODEL_ID: RegExp;
 export const PI_NOUS_PORTAL_HY4: "nous-portal/tencent/hy4-preview";
 export const PI_ADMITTED_WRITER: "openrouter/qwen/qwen3-coder-plus";
 export const ROUTES: Record<string, {
@@ -27,7 +29,7 @@ export const ROUTES: Record<string, {
   auth: { args: readonly string[]; loginHint: string };
 }>;
 
-export function clampEffort(harness: string, effort?: string): { effort?: string; clamped?: string };
+export function clampEffort(harness: string, effort?: string, model?: string): { effort?: string; clamped?: string };
 export function parseJson(text: string): unknown;
 export function piProviderOf(model?: string): string | undefined;
 export function piModelId(model?: string): string | undefined;

package/scripts/harness-run.mjs

@@ -72,8 +72,14 @@ export const NATIVE_PI_BRAKE_PROVIDERS = Object.freeze([
   "deepseek",
 ]);
 
-/** Verified Pi aggregator prefixes. Not a catalog and not a writer grant. */
-export const PI_ALLOWED_PROVIDERS = Object.freeze(["openrouter", "nous-portal"]);
+/** Verified Pi aggregator prefixes and native-vendor Pi providers. Not a catalog and not a writer grant. */
+export const PI_ALLOWED_PROVIDERS = Object.freeze(["openrouter", "nous-portal", "antigravity"]);
+
+/** Native-vendor Pi providers own one braked vendor. Aggregators are not listed here. */
+export const PI_NATIVE_VENDOR_PROVIDERS = Object.freeze({ antigravity: "google" });
+
+/** Gemini kebab ids for antigravity two-segment models (`antigravity/gemini-...`). */
+export const PI_ANTIGRAVITY_MODEL_ID = /^gemini-[a-z0-9.-]+$/;
 
 /** Exact helper model string after `@jayteelabs/pi-nous-portal-provider` is installed. */
 export const PI_NOUS_PORTAL_HY4 = "nous-portal/tencent/hy4-preview";
@@ -171,8 +177,19 @@ export const ROUTES = Object.freeze({
 
 const UNVERIFIED_HARNESSES = Object.freeze(["kimi", "gemini", "deepseek"]);
 
-export function clampEffort(harness, effort) {
-  const accepted = ROUTES[harness]?.efforts ?? [];
+function piNativeVendor(provider) {
+  return Object.hasOwn(PI_NATIVE_VENDOR_PROVIDERS, provider)
+    ? PI_NATIVE_VENDOR_PROVIDERS[provider]
+    : undefined;
+}
+
+const PI_NATIVE_VENDOR_EFFORTS = Object.freeze(["low", "medium", "high"]);
+
+export function clampEffort(harness, effort, model) {
+  const provider = typeof model === "string" ? piProviderOf(model) : undefined;
+  const accepted = provider && piNativeVendor(provider)
+    ? PI_NATIVE_VENDOR_EFFORTS
+    : (ROUTES[harness]?.efforts ?? []);
   if (!effort) return { effort: undefined, clamped: undefined };
   if (!EFFORT.includes(effort)) {
     throw failClosed(`unknown effort ${effort}; expected one of ${EFFORT.join(", ")}`);
@@ -220,6 +237,9 @@ function piLoginHint(provider) {
     return "pi install npm:@jayteelabs/pi-nous-portal-provider, then /login → subscription or API key → Nous Research Portal (or NOUS_API_KEY)";
   }
   if (provider === "openrouter") return "pi /login openrouter";
+  if (provider === "antigravity") {
+    return "pi /login antigravity (Google OAuth, localhost:51121, paste-URL fallback)";
+  }
   return ROUTES.pi.auth.loginHint;
 }
 
@@ -245,6 +265,7 @@ export function piModelId(model) {
 function piProviderLabel(provider) {
   if (provider === "nous-portal") return "Nous Portal";
   if (provider === "openrouter") return "OpenRouter";
+  if (provider === "antigravity") return "Antigravity";
   return "Pi provider";
 }
 
@@ -433,11 +454,13 @@ export function parseAuth(harness, stdio, options = {}) {
     const reportedFromJson = typeof payload?.provider === "string"
       ? payload.provider.trim().toLowerCase()
       : undefined;
-    const reportedFromText = /\bnous-portal\b/i.test(text)
-      ? "nous-portal"
-      : /\bopenrouter\b/i.test(text)
-        ? "openrouter"
-        : undefined;
+    const reportedFromText = /\bantigravity\b/i.test(text)
+      ? "antigravity"
+      : /\bnous-portal\b/i.test(text)
+        ? "nous-portal"
+        : /\bopenrouter\b/i.test(text)
+          ? "openrouter"
+          : undefined;
     const reported = reportedFromJson ?? reportedFromText ?? requested;
     const jsonStatus = typeof payload?.status === "string" ? payload.status : undefined;
     if (/not[_ ]ready/i.test(text) || (jsonStatus !== undefined && jsonStatus !== "ready")
@@ -452,7 +475,7 @@ export function parseAuth(harness, stdio, options = {}) {
     }
     if (!PI_ALLOWED_PROVIDERS.includes(reported)) {
       throw failClosed(
-        loginHint("pi", `pi helper allows only openrouter/* or nous-portal/*; ${reported} is not allowlisted.`, requested),
+        loginHint("pi", `pi helper allows only openrouter/*, nous-portal/*, or antigravity/*; ${reported} is not allowlisted.`, requested),
         "auth",
       );
     }
@@ -1510,13 +1533,20 @@ export function preflightRequest(request) {
   if (harness === "pi") {
     const provider = piProviderOf(request.model);
     if (!provider) {
-      throw failClosed("pi model must be provider/id (openrouter/* or nous-portal/* in this helper)");
+      throw failClosed("pi model must be provider/id (openrouter/*, nous-portal/*, or antigravity/* in this helper)");
     }
     if (NATIVE_PI_BRAKE_PROVIDERS.includes(provider)) {
       throw failClosed(`pi brake: ${provider} has a native harness; refusing Pi impersonation`);
     }
     if (!PI_ALLOWED_PROVIDERS.includes(provider)) {
-      throw failClosed(`pi helper allows only openrouter/* or nous-portal/*; ${provider} is not a native CLI and is not allowlisted`);
+      throw failClosed(`pi helper allows only openrouter/*, nous-portal/*, or antigravity/*; ${provider} is not a native CLI and is not allowlisted`);
+    }
+    if (piNativeVendor(provider)) {
+      const modelId = piModelId(request.model);
+      const parts = String(request.model).split("/");
+      if (parts.length !== 2 || parts.some((part) => !part) || !modelId || !PI_ANTIGRAVITY_MODEL_ID.test(modelId)) {
+        throw failClosed("pi antigravity models must be exactly two-segment Gemini kebab ids (antigravity/gemini-...)");
+      }
     }
     if (request.role === "writer" && (request.model !== PI_ADMITTED_WRITER || request.permission !== "edit")) {
       throw failClosed("pi writer refuses unsupported route; allows only authenticated openrouter/qwen/qwen3-coder-plus with edit permission; other models need reviewed route admission");
@@ -1602,7 +1632,7 @@ export async function runHarness(request, deps = {}) {
     : undefined;
   const cwd = request.cwd ?? process.cwd();
   const env = deps.env ?? process.env;
-  const { effort, clamped } = clampEffort(request.harness, request.effort);
+  const { effort, clamped } = clampEffort(request.harness, request.effort, request.model);
   const prepared = { ...request, effort };
   const outputDir = ensureOutputDir(
     request.output_dir ?? join(cwd, ".kxm", "logs", `harness-${now()}`),
@@ -1780,6 +1810,9 @@ export async function runHarness(request, deps = {}) {
   } else if (request.harness === "agy" && authStatus.method === "antigravity-oauth") {
     fields.costBasis = "unmetered";
     fields.costUsd = undefined;
+  } else if (request.harness === "pi" && authStatus.method === "antigravity") {
+    fields.costBasis = "unmetered";
+    fields.costUsd = undefined;
   } else if (fields.costUsd === undefined && fields.providerReportedCostUsd === undefined) {
     fields.costBasis = fields.costBasis ?? "unknown";
   }

package/scripts/roster-policy.d.mts

@@ -18,3 +18,7 @@ export interface LoadedPolicy { readonly identity: PolicyIdentity; readonly poli
 export function loadTrustedRosterPolicy(): LoadedPolicy;
 export function resolveBoundPolicy(identity: PolicyIdentity): LoadedPolicy;
 export function canonicalVendor(value: string): string;
+export function validateRosterDocument(
+  policy: RosterPolicy,
+  readBlob: (source: string) => string | Uint8Array | null | undefined,
+): RosterPolicy;

package/scripts/roster-policy.mjs

@@ -4,7 +4,7 @@ import { createHash } from 'node:crypto';
 import { lstatSync, readFileSync, realpathSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { NATIVE_PI_BRAKE_PROVIDERS, PI_ALLOWED_PROVIDERS, ROUTES } from './harness-run.mjs';
+import { NATIVE_PI_BRAKE_PROVIDERS, PI_ALLOWED_PROVIDERS, PI_ANTIGRAVITY_MODEL_ID, PI_NATIVE_VENDOR_PROVIDERS, ROUTES } from './harness-run.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const POLICY = '.kxm/roster.json';
@@ -84,19 +84,20 @@ function workingBytes(source) {
   }
   return readFileSync(current);
 }
-function validate(bytes, commit) {
-  let policy;
-  try { policy = JSON.parse(bytes.toString('utf8')); } catch { refuse('invalid policy JSON'); }
+export function validateRosterDocument(policy, readBlob) {
   keys(policy, ['schema', 'routes', 'lineup', 'required_critics', 'model_origins'], 'policy');
   if (policy.schema !== 'kxm.developer-roster.v1') refuse('unsupported schema');
   record(policy.routes, 'routes'); record(policy.lineup, 'lineup'); record(policy.model_origins, 'model origins');
   if (!Object.keys(policy.routes).length) refuse('empty routes');
+  if (typeof readBlob !== 'function') refuse('origin evidence reader required');
   for (const [model, origin] of Object.entries(policy.model_origins)) {
     text(model, 'origin model'); keys(origin, ['vendor', 'evidence'], 'origin');
     text(origin.vendor, 'origin vendor');
     if (PI_ALLOWED_PROVIDERS.includes(canonical(origin.vendor.toLowerCase()))) refuse('origin/vendor must name the model vendor, not billing provider');
     keys(origin.evidence, ['source', 'sha256'], 'origin evidence'); digest(origin.evidence.sha256);
-    if (sha256(blobAt(commit, origin.evidence.source).bytes) !== origin.evidence.sha256) refuse('origin evidence hash mismatch');
+    sourcePath(origin.evidence.source);
+    const bytes = readBlob(origin.evidence.source);
+    if (bytes == null || sha256(bytes) !== origin.evidence.sha256) refuse('origin evidence hash mismatch');
   }
   for (const [id, route] of Object.entries(policy.routes)) {
     if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(id)) refuse('invalid route id');
@@ -108,10 +109,26 @@ function validate(bytes, commit) {
     if (!['admitted', 'retired'].includes(route.status)) refuse('unsupported status');
     if (route.harness === 'pi') {
       const parts = route.model.split('/');
-      if (parts.length < 3 || !PI_ALLOWED_PROVIDERS.includes(parts[0]) || parts.some(part => !part)) refuse('unsupported Pi provider/model');
-      const prefix = canonical(parts[1].toLowerCase());
+      const provider = parts[0];
+      const owned = Object.hasOwn(PI_NATIVE_VENDOR_PROVIDERS, provider)
+        ? canonical(PI_NATIVE_VENDOR_PROVIDERS[provider])
+        : '';
+      const minParts = owned ? 2 : 3;
+      const maxParts = owned ? 2 : Number.POSITIVE_INFINITY;
+      if (
+        parts.length < minParts
+        || parts.length > maxParts
+        || !PI_ALLOWED_PROVIDERS.includes(provider)
+        || parts.some(part => !part)
+        || (owned && !PI_ANTIGRAVITY_MODEL_ID.test(parts[1]))
+      ) refuse('unsupported Pi provider/model');
       const vendor = canonical(route.vendor.toLowerCase());
-      if (NATIVE_PI_BRAKE_PROVIDERS.includes(prefix) || NATIVE_PI_BRAKE_PROVIDERS.includes(vendor)) refuse('native vendor cannot use Pi');
+      if (owned) {
+        if (owned !== vendor) refuse('native vendor cannot use Pi');
+      } else {
+        const prefix = canonical(parts[1].toLowerCase());
+        if (NATIVE_PI_BRAKE_PROVIDERS.includes(prefix) || NATIVE_PI_BRAKE_PROVIDERS.includes(vendor)) refuse('native vendor cannot use Pi');
+      }
       if (!own(policy.model_origins, route.model)) refuse('missing exact model origin');
       const origin = policy.model_origins[route.model];
       if (canonical(origin.vendor.toLowerCase()) !== vendor || PI_ALLOWED_PROVIDERS.includes(vendor)) refuse('model origin/vendor mismatch');
@@ -140,6 +157,11 @@ function validate(bytes, commit) {
   }
   return policy;
 }
+function validate(bytes, commit) {
+  let policy;
+  try { policy = JSON.parse(bytes.toString('utf8')); } catch { refuse('invalid policy JSON'); }
+  return validateRosterDocument(policy, source => blobAt(commit, source).bytes);
+}
 export function loadTrustedRosterPolicy() {
   const snapshot = control();
   const { blob, bytes } = blobAt(snapshot.head, POLICY);